CVE-2004-0768
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow...
CVE-2004-0768 is a high vulnerability (CVSS 7.5) in Greg Roelofs Libpng3, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.26%, the 88th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 3.26%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
CVE-2004-0768- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
CVE-2004-0768- Updated
- 2026-11-02
EUVDEUVD-2004-0766No score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
EUVD-2004-0766- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p78-6v29-xw89No score
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow...
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- Record
GHSA-8p78-6v29-xw89- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.