Every CVE Search/ Get API key

CVE-2006-0481

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent...

5.0 MediumFix available

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Exploit likelihood

3.08%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Record
CVE-2006-0481
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Record
CVE-2006-0481
Updated
2026-11-02
EUVDEUVD-2006-0488 No score

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Record
EUVD-2006-0488
Updated
2026-11-03
GitHub AdvisoriesGHSA-g542-vx79-g9v8 No score

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent...

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Record
GHSA-g542-vx79-g9v8
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libpng
Red Hat:enterprise_linux:4::as
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-debuginfo
Red Hat:enterprise_linux:4::as
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-devel
Red Hat:enterprise_linux:4::as
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng
Red Hat:enterprise_linux:4::desktop
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-devel
Red Hat:enterprise_linux:4::desktop
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng
Red Hat:enterprise_linux:4::es
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-debuginfo
Red Hat:enterprise_linux:4::es
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-devel
Red Hat:enterprise_linux:4::es
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng
Red Hat:enterprise_linux:4::ws
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-debuginfo
Red Hat:enterprise_linux:4::ws
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2
libpng-devel
Red Hat:enterprise_linux:4::ws
 before 2:1.2.7-1.el4.2
2:1.2.7-1.el4.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-0481 is a medium vulnerability (CVSS 5.0) in Greg Roelofs Libpng, published January 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. Fixed in libpng 2:1.2.7-1.el4.2.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open