CVE-2008-5907
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34,...
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
Exploit likelihood
What each source reports
NVD Score used
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
- Record
CVE-2008-5907- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
- Record
CVE-2008-5907- Updated
- 2026-11-02
EUVDEUVD-2008-5877 No score
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
- Record
EUVD-2008-5877- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-598m-m5h8-fc92 No score
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34,...
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.
- Record
GHSA-598m-m5h8-fc92- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5907 is a medium vulnerability (CVSS 5.0) in Libpng, published January 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. No source names a fixed version.
References
libpng.sourceforge.net/index.html
security.gentoo.org/glsa/glsa-200903-28.xml
exchange.xforce.ibmcloud.com/vulnerabilities/48128
lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
secunia.com/advisories/34388
debian.org/security/2009/dsa-1750
Show 6 moreShow less
openwall.com/lists/oss-security/2009/01/09/1
mandriva.com/security/advisories?name=MDVSA-2009:051
sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implement
nvd.nist.gov/vuln/detail/CVE-2008-5907
github.com/advisories/GHSA-598m-m5h8-fc92