CVE-2004-0768
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow...
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Exploit likelihood
What each source reports
NVD Score used
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
CVE-2004-0768- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
CVE-2004-0768- Updated
- 2026-11-02
EUVDEUVD-2004-0766 No score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
EUVD-2004-0766- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p78-6v29-xw89 No score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow...
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
GHSA-8p78-6v29-xw89- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0768 is a high vulnerability (CVSS 7.5) in Greg Roelofs Libpng3, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.26%, the 88th percentile. No source names a fixed version.