CVE-2011-3026
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers...
6.8 MediumPublic exploitFix available
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
Exploit likelihood
72.9%Up 46.5 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
- Record
CVE-2011-3026- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
- Record
CVE-2011-3026- Updated
- 2026-11-02
EUVDEUVD-2011-2994 No score
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
- Record
EUVD-2011-2994- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9qqw-9qvw-hj9x No score
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers...
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
- Record
GHSA-9qqw-9qvw-hj9x- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVBELL-CVE-2011-3026
CVE-2011-3026 does not affect BellSoft software
- Record
BELL-CVE-2011-3026- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10184-1 No score
libpng12-0-1.2.56-1.5 on GA media
These are all security issues fixed in the libpng12-0-1.2.56-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10184-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpngDebian:6.0 |
before 1.2.44-1+squeeze2, plus listed versions 1.2.44-11.2.44-1+squeeze1 |
1.2.44-1+squeeze2 |
thunderbirdRed Hat:enterprise_linux:6::client |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::server |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::workstation |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.1.18-2.el6_2 | 0:3.1.18-2.el6_2 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
Show 106 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-79.el4 | 0:1.0.9-79.el4 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefoxRed Hat:enterprise_linux:4::es |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.6.26-3.el4 | 0:3.6.26-3.el4 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:1.9.2.26-2.el5_7 | 0:1.9.2.26-2.el5_7 |
xulrunnerRed Hat:enterprise_linux:6::client |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::client |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::computenode |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::computenode |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::server |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::server |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::workstation |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::workstation |
before 0:1.9.2.26-2.el6_2 | 0:1.9.2.26-2.el6_2 |
libpngRed Hat:enterprise_linux:4::as |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::as |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-develRed Hat:enterprise_linux:4::as |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng10Red Hat:enterprise_linux:4::as |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-develRed Hat:enterprise_linux:4::as |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpngRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-develRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng10Red Hat:enterprise_linux:4::desktop |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpngRed Hat:enterprise_linux:4::es |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::es |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-develRed Hat:enterprise_linux:4::es |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng10Red Hat:enterprise_linux:4::es |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-develRed Hat:enterprise_linux:4::es |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpngRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng-develRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-9.el4 | 2:1.2.7-9.el4 |
libpng10Red Hat:enterprise_linux:4::ws |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpng10-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.16-10.el4 | 0:1.0.16-10.el4 |
libpngRed Hat:enterprise_linux:5::client |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpng-debuginfoRed Hat:enterprise_linux:5::client |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpngRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpng-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpng-develRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpngRed Hat:enterprise_linux:5::server |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpng-debuginfoRed Hat:enterprise_linux:5::server |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpng-develRed Hat:enterprise_linux:5::server |
before 2:1.2.10-15.el5_7 | 2:1.2.10-15.el5_7 |
libpngRed Hat:enterprise_linux:6::client |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-debuginfoRed Hat:enterprise_linux:6::client |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-develRed Hat:enterprise_linux:6::client |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-staticRed Hat:enterprise_linux:6::client |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpngRed Hat:enterprise_linux:6::computenode |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-debuginfoRed Hat:enterprise_linux:6::computenode |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-develRed Hat:enterprise_linux:6::computenode |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-staticRed Hat:enterprise_linux:6::computenode |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpngRed Hat:enterprise_linux:6::server |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-debuginfoRed Hat:enterprise_linux:6::server |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-develRed Hat:enterprise_linux:6::server |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-staticRed Hat:enterprise_linux:6::server |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpngRed Hat:enterprise_linux:6::workstation |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-debuginfoRed Hat:enterprise_linux:6::workstation |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-develRed Hat:enterprise_linux:6::workstation |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
libpng-staticRed Hat:enterprise_linux:6::workstation |
before 2:1.2.46-2.el6_2 | 2:1.2.46-2.el6_2 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | argp/cve-2011-3026-firefox | 2012-08-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3026 is a medium vulnerability (CVSS 6.8) in Google Chrome, published February 15, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.9%, the 99th percentile. Fixed in libpng 1.2.44-1+squeeze2.
References
secunia.com/advisories/49660
lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
support.apple.com/kb/HT5503
security.gentoo.org/glsa/glsa-201206-15.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15032
Show 194 moreShow less
code.google.com/p/chromium/issues/detail?id=112822
lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html
googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
nvd.nist.gov/vuln/detail/CVE-2011-3026
github.com/advisories/GHSA-9qqw-9qvw-hj9x
docs.bell-sw.com/security/cves/CVE-2011-3026
access.redhat.com/errata/RHSA-2012:0140
bugzilla.redhat.com/show_bug.cgi?id=790737
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0140.json
cve.org/CVERecord?id=CVE-2011-3026
mozilla.org/security/announce/2012/mfsa2012-11.html
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 4,249 references. The JSON record has them.