libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via out-of-bounds pixels in the file.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libpng | Libpng | * | 1.2.35 (including) |
| Libpng | Libpng | 0.89c (including) | 0.89c (including) |
| Libpng | Libpng | 0.95 (including) | 0.95 (including) |
| Libpng | Libpng | 1.0.0 (including) | 1.0.0 (including) |
| Libpng | Libpng | 1.0.1 (including) | 1.0.1 (including) |
| Libpng | Libpng | 1.0.2 (including) | 1.0.2 (including) |
| Libpng | Libpng | 1.0.7-beta17 (including) | 1.0.7-beta17 (including) |
| Libpng | Libpng | 1.0.7-beta18 (including) | 1.0.7-beta18 (including) |
| Libpng | Libpng | 1.0.7-rc1 (including) | 1.0.7-rc1 (including) |
| Libpng | Libpng | 1.0.7-rc2 (including) | 1.0.7-rc2 (including) |
| Libpng | Libpng | 1.0.8 (including) | 1.0.8 (including) |
| Libpng | Libpng | 1.0.8-beta1 (including) | 1.0.8-beta1 (including) |
| Libpng | Libpng | 1.0.8-beta2 (including) | 1.0.8-beta2 (including) |
| Libpng | Libpng | 1.0.8-beta3 (including) | 1.0.8-beta3 (including) |
| Libpng | Libpng | 1.0.8-beta4 (including) | 1.0.8-beta4 (including) |
| Libpng | Libpng | 1.0.8-rc1 (including) | 1.0.8-rc1 (including) |
| Libpng | Libpng | 1.0.9 (including) | 1.0.9 (including) |
| Libpng | Libpng | 1.0.9-beta1 (including) | 1.0.9-beta1 (including) |
| Libpng | Libpng | 1.0.9-beta10 (including) | 1.0.9-beta10 (including) |
| Libpng | Libpng | 1.0.9-beta2 (including) | 1.0.9-beta2 (including) |
| Libpng | Libpng | 1.0.9-beta3 (including) | 1.0.9-beta3 (including) |
| Libpng | Libpng | 1.0.9-beta4 (including) | 1.0.9-beta4 (including) |
| Libpng | Libpng | 1.0.9-beta5 (including) | 1.0.9-beta5 (including) |
| Libpng | Libpng | 1.0.9-beta6 (including) | 1.0.9-beta6 (including) |
| Libpng | Libpng | 1.0.9-beta7 (including) | 1.0.9-beta7 (including) |
| Libpng | Libpng | 1.0.9-beta8 (including) | 1.0.9-beta8 (including) |
| Libpng | Libpng | 1.0.9-beta9 (including) | 1.0.9-beta9 (including) |
| Libpng | Libpng | 1.0.9-rc1 (including) | 1.0.9-rc1 (including) |
| Libpng | Libpng | 1.0.9-rc2 (including) | 1.0.9-rc2 (including) |
| Libpng | Libpng | 1.0.10 (including) | 1.0.10 (including) |
| Libpng | Libpng | 1.0.10-beta1 (including) | 1.0.10-beta1 (including) |
| Libpng | Libpng | 1.0.10-rc1 (including) | 1.0.10-rc1 (including) |
| Libpng | Libpng | 1.0.11 (including) | 1.0.11 (including) |
| Libpng | Libpng | 1.0.11-beta1 (including) | 1.0.11-beta1 (including) |
| Libpng | Libpng | 1.0.11-beta2 (including) | 1.0.11-beta2 (including) |
| Libpng | Libpng | 1.0.11-beta3 (including) | 1.0.11-beta3 (including) |
| Libpng | Libpng | 1.0.11-rc1 (including) | 1.0.11-rc1 (including) |
| Libpng | Libpng | 1.0.12 (including) | 1.0.12 (including) |
| Libpng | Libpng | 1.0.12-beta1 (including) | 1.0.12-beta1 (including) |
| Libpng | Libpng | 1.0.12-rc1 (including) | 1.0.12-rc1 (including) |
| Libpng | Libpng | 1.0.13 (including) | 1.0.13 (including) |
| Libpng | Libpng | 1.0.14 (including) | 1.0.14 (including) |
| Libpng | Libpng | 1.0.15 (including) | 1.0.15 (including) |
| Libpng | Libpng | 1.0.15-rc1 (including) | 1.0.15-rc1 (including) |
| Libpng | Libpng | 1.0.15-rc2 (including) | 1.0.15-rc2 (including) |
| Libpng | Libpng | 1.0.15-rc3 (including) | 1.0.15-rc3 (including) |
| Libpng | Libpng | 1.0.16 (including) | 1.0.16 (including) |
| Libpng | Libpng | 1.0.17 (including) | 1.0.17 (including) |
| Libpng | Libpng | 1.0.17-rc1 (including) | 1.0.17-rc1 (including) |
| Libpng | Libpng | 1.0.18 (including) | 1.0.18 (including) |
| Libpng | Libpng | 1.0.19 (including) | 1.0.19 (including) |
| Libpng | Libpng | 1.0.19-rc1 (including) | 1.0.19-rc1 (including) |
| Libpng | Libpng | 1.0.19-rc2 (including) | 1.0.19-rc2 (including) |
| Libpng | Libpng | 1.0.19-rc3 (including) | 1.0.19-rc3 (including) |
| Libpng | Libpng | 1.0.19-rc5 (including) | 1.0.19-rc5 (including) |
| Libpng | Libpng | 1.0.20 (including) | 1.0.20 (including) |
| Libpng | Libpng | 1.0.21 (including) | 1.0.21 (including) |
| Libpng | Libpng | 1.0.21-rc1 (including) | 1.0.21-rc1 (including) |
| Libpng | Libpng | 1.0.21-rc2 (including) | 1.0.21-rc2 (including) |
| Libpng | Libpng | 1.0.22 (including) | 1.0.22 (including) |
| Libpng | Libpng | 1.0.22-rc1 (including) | 1.0.22-rc1 (including) |
| Libpng | Libpng | 1.0.23 (including) | 1.0.23 (including) |
| Libpng | Libpng | 1.0.23-rc1 (including) | 1.0.23-rc1 (including) |
| Libpng | Libpng | 1.2.0 (including) | 1.2.0 (including) |
| Libpng | Libpng | 1.2.0-beta1 (including) | 1.2.0-beta1 (including) |
| Libpng | Libpng | 1.2.0-beta2 (including) | 1.2.0-beta2 (including) |
| Libpng | Libpng | 1.2.0-beta3 (including) | 1.2.0-beta3 (including) |
| Libpng | Libpng | 1.2.0-beta4 (including) | 1.2.0-beta4 (including) |
| Libpng | Libpng | 1.2.0-beta5 (including) | 1.2.0-beta5 (including) |
| Libpng | Libpng | 1.2.0-rc1 (including) | 1.2.0-rc1 (including) |
| Libpng | Libpng | 1.2.1 (including) | 1.2.1 (including) |
| Libpng | Libpng | 1.2.1-beta1 (including) | 1.2.1-beta1 (including) |
| Libpng | Libpng | 1.2.1-beta2 (including) | 1.2.1-beta2 (including) |
| Libpng | Libpng | 1.2.1-beta3 (including) | 1.2.1-beta3 (including) |
| Libpng | Libpng | 1.2.1-beta4 (including) | 1.2.1-beta4 (including) |
| Libpng | Libpng | 1.2.1-rc1 (including) | 1.2.1-rc1 (including) |
| Libpng | Libpng | 1.2.1-rc2 (including) | 1.2.1-rc2 (including) |
| Libpng | Libpng | 1.2.2 (including) | 1.2.2 (including) |
| Libpng | Libpng | 1.2.2-beta1 (including) | 1.2.2-beta1 (including) |
| Libpng | Libpng | 1.2.2-beta2 (including) | 1.2.2-beta2 (including) |
| Libpng | Libpng | 1.2.2-beta3 (including) | 1.2.2-beta3 (including) |
| Libpng | Libpng | 1.2.2-beta4 (including) | 1.2.2-beta4 (including) |
| Libpng | Libpng | 1.2.2-beta5 (including) | 1.2.2-beta5 (including) |
| Libpng | Libpng | 1.2.2-beta6 (including) | 1.2.2-beta6 (including) |
| Libpng | Libpng | 1.2.2-rc1 (including) | 1.2.2-rc1 (including) |
| Libpng | Libpng | 1.2.3 (including) | 1.2.3 (including) |
| Libpng | Libpng | 1.2.3-rc3 (including) | 1.2.3-rc3 (including) |
| Libpng | Libpng | 1.2.3-rc6 (including) | 1.2.3-rc6 (including) |
| Libpng | Libpng | 1.2.10 (including) | 1.2.10 (including) |
| Libpng | Libpng | 1.2.10-beta1 (including) | 1.2.10-beta1 (including) |
| Libpng | Libpng | 1.2.10-beta2 (including) | 1.2.10-beta2 (including) |
| Libpng | Libpng | 1.2.10-beta3 (including) | 1.2.10-beta3 (including) |
| Libpng | Libpng | 1.2.10-beta4 (including) | 1.2.10-beta4 (including) |
| Libpng | Libpng | 1.2.10-beta5 (including) | 1.2.10-beta5 (including) |
| Libpng | Libpng | 1.2.10-beta6 (including) | 1.2.10-beta6 (including) |
| Libpng | Libpng | 1.2.10-beta7 (including) | 1.2.10-beta7 (including) |
| Libpng | Libpng | 1.2.10-rc1 (including) | 1.2.10-rc1 (including) |
| Libpng | Libpng | 1.2.10-rc2 (including) | 1.2.10-rc2 (including) |
| Libpng | Libpng | 1.2.10-rc3 (including) | 1.2.10-rc3 (including) |
| Libpng | Libpng | 1.2.11 (including) | 1.2.11 (including) |
| Libpng | Libpng | 1.2.11-beta1 (including) | 1.2.11-beta1 (including) |
| Libpng | Libpng | 1.2.11-beta2 (including) | 1.2.11-beta2 (including) |
| Libpng | Libpng | 1.2.11-beta3 (including) | 1.2.11-beta3 (including) |
| Libpng | Libpng | 1.2.11-beta4 (including) | 1.2.11-beta4 (including) |
| Libpng | Libpng | 1.2.11-rc1 (including) | 1.2.11-rc1 (including) |
| Libpng | Libpng | 1.2.11-rc2 (including) | 1.2.11-rc2 (including) |
| Libpng | Libpng | 1.2.11-rc3 (including) | 1.2.11-rc3 (including) |
| Libpng | Libpng | 1.2.11-rc5 (including) | 1.2.11-rc5 (including) |
| Libpng | Libpng | 1.2.13 (including) | 1.2.13 (including) |
| Libpng | Libpng | 1.2.13-beta1 (including) | 1.2.13-beta1 (including) |
| Libpng | Libpng | 1.2.13-rc1 (including) | 1.2.13-rc1 (including) |
| Libpng | Libpng | 1.2.13-rc2 (including) | 1.2.13-rc2 (including) |
| Libpng | Libpng | 1.2.14 (including) | 1.2.14 (including) |
| Libpng | Libpng | 1.2.14-beta1 (including) | 1.2.14-beta1 (including) |
| Libpng | Libpng | 1.2.14-beta2 (including) | 1.2.14-beta2 (including) |
| Libpng | Libpng | 1.2.14-rc1 (including) | 1.2.14-rc1 (including) |
| Libpng | Libpng | 1.2.15 (including) | 1.2.15 (including) |
| Libpng | Libpng | 1.2.15-beta1 (including) | 1.2.15-beta1 (including) |
| Libpng | Libpng | 1.2.15-beta2 (including) | 1.2.15-beta2 (including) |
| Libpng | Libpng | 1.2.15-beta3 (including) | 1.2.15-beta3 (including) |
| Libpng | Libpng | 1.2.15-beta4 (including) | 1.2.15-beta4 (including) |
| Libpng | Libpng | 1.2.15-beta5 (including) | 1.2.15-beta5 (including) |
| Libpng | Libpng | 1.2.15-beta6 (including) | 1.2.15-beta6 (including) |
| Libpng | Libpng | 1.2.15-rc1 (including) | 1.2.15-rc1 (including) |
| Libpng | Libpng | 1.2.15-rc2 (including) | 1.2.15-rc2 (including) |
| Libpng | Libpng | 1.2.15-rc3 (including) | 1.2.15-rc3 (including) |
| Libpng | Libpng | 1.2.15-rc4 (including) | 1.2.15-rc4 (including) |
| Libpng | Libpng | 1.2.15-rc5 (including) | 1.2.15-rc5 (including) |
| Libpng | Libpng | 1.2.16 (including) | 1.2.16 (including) |
| Libpng | Libpng | 1.2.16-beta1 (including) | 1.2.16-beta1 (including) |
| Libpng | Libpng | 1.2.16-beta2 (including) | 1.2.16-beta2 (including) |
| Libpng | Libpng | 1.2.16-rc1 (including) | 1.2.16-rc1 (including) |
| Libpng | Libpng | 1.2.17 (including) | 1.2.17 (including) |
| Libpng | Libpng | 1.2.17-beta1 (including) | 1.2.17-beta1 (including) |
| Libpng | Libpng | 1.2.17-beta2 (including) | 1.2.17-beta2 (including) |
| Libpng | Libpng | 1.2.17-rc1 (including) | 1.2.17-rc1 (including) |
| Libpng | Libpng | 1.2.17-rc2 (including) | 1.2.17-rc2 (including) |
| Libpng | Libpng | 1.2.17-rc3 (including) | 1.2.17-rc3 (including) |
| Libpng | Libpng | 1.2.17-rc4 (including) | 1.2.17-rc4 (including) |
| Libpng | Libpng | 1.2.18 (including) | 1.2.18 (including) |
| Libpng | Libpng | 1.2.19 (including) | 1.2.19 (including) |
| Libpng | Libpng | 1.2.19-beta1 (including) | 1.2.19-beta1 (including) |
| Libpng | Libpng | 1.2.19-beta10 (including) | 1.2.19-beta10 (including) |
| Libpng | Libpng | 1.2.19-beta11 (including) | 1.2.19-beta11 (including) |
| Libpng | Libpng | 1.2.19-beta12 (including) | 1.2.19-beta12 (including) |
| Libpng | Libpng | 1.2.19-beta13 (including) | 1.2.19-beta13 (including) |
| Libpng | Libpng | 1.2.19-beta14 (including) | 1.2.19-beta14 (including) |
| Libpng | Libpng | 1.2.19-beta15 (including) | 1.2.19-beta15 (including) |
| Libpng | Libpng | 1.2.19-beta16 (including) | 1.2.19-beta16 (including) |
| Libpng | Libpng | 1.2.19-beta17 (including) | 1.2.19-beta17 (including) |
| Libpng | Libpng | 1.2.19-beta18 (including) | 1.2.19-beta18 (including) |
| Libpng | Libpng | 1.2.19-beta19 (including) | 1.2.19-beta19 (including) |
| Libpng | Libpng | 1.2.19-beta2 (including) | 1.2.19-beta2 (including) |
| Libpng | Libpng | 1.2.19-beta20 (including) | 1.2.19-beta20 (including) |
| Libpng | Libpng | 1.2.19-beta21 (including) | 1.2.19-beta21 (including) |
| Libpng | Libpng | 1.2.19-beta22 (including) | 1.2.19-beta22 (including) |
| Libpng | Libpng | 1.2.19-beta23 (including) | 1.2.19-beta23 (including) |
| Libpng | Libpng | 1.2.19-beta24 (including) | 1.2.19-beta24 (including) |
| Libpng | Libpng | 1.2.19-beta25 (including) | 1.2.19-beta25 (including) |
| Libpng | Libpng | 1.2.19-beta26 (including) | 1.2.19-beta26 (including) |
| Libpng | Libpng | 1.2.19-beta27 (including) | 1.2.19-beta27 (including) |
| Libpng | Libpng | 1.2.19-beta28 (including) | 1.2.19-beta28 (including) |
| Libpng | Libpng | 1.2.19-beta29 (including) | 1.2.19-beta29 (including) |
| Libpng | Libpng | 1.2.19-beta3 (including) | 1.2.19-beta3 (including) |
| Libpng | Libpng | 1.2.19-beta30 (including) | 1.2.19-beta30 (including) |
| Libpng | Libpng | 1.2.19-beta31 (including) | 1.2.19-beta31 (including) |
| Libpng | Libpng | 1.2.19-beta32 (including) | 1.2.19-beta32 (including) |
| Libpng | Libpng | 1.2.19-beta33 (including) | 1.2.19-beta33 (including) |
| Libpng | Libpng | 1.2.19-beta4 (including) | 1.2.19-beta4 (including) |
| Libpng | Libpng | 1.2.19-beta5 (including) | 1.2.19-beta5 (including) |
| Libpng | Libpng | 1.2.19-beta6 (including) | 1.2.19-beta6 (including) |
| Libpng | Libpng | 1.2.19-beta7 (including) | 1.2.19-beta7 (including) |
| Libpng | Libpng | 1.2.19-beta8 (including) | 1.2.19-beta8 (including) |
| Libpng | Libpng | 1.2.19-beta9 (including) | 1.2.19-beta9 (including) |
| Libpng | Libpng | 1.2.19-rc1 (including) | 1.2.19-rc1 (including) |
| Libpng | Libpng | 1.2.19-rc2 (including) | 1.2.19-rc2 (including) |
| Libpng | Libpng | 1.2.19-rc3 (including) | 1.2.19-rc3 (including) |
| Libpng | Libpng | 1.2.19-rc4 (including) | 1.2.19-rc4 (including) |
| Libpng | Libpng | 1.2.19-rc5 (including) | 1.2.19-rc5 (including) |
| Libpng | Libpng | 1.2.19-rc6 (including) | 1.2.19-rc6 (including) |
| Libpng | Libpng | 1.2.20 (including) | 1.2.20 (including) |
| Libpng | Libpng | 1.2.20-beta01 (including) | 1.2.20-beta01 (including) |
| Libpng | Libpng | 1.2.20-beta02 (including) | 1.2.20-beta02 (including) |
| Libpng | Libpng | 1.2.20-beta03 (including) | 1.2.20-beta03 (including) |
| Libpng | Libpng | 1.2.20-beta04 (including) | 1.2.20-beta04 (including) |
| Libpng | Libpng | 1.2.20-rc1 (including) | 1.2.20-rc1 (including) |
| Libpng | Libpng | 1.2.20-rc2 (including) | 1.2.20-rc2 (including) |
| Libpng | Libpng | 1.2.20-rc3 (including) | 1.2.20-rc3 (including) |
| Libpng | Libpng | 1.2.20-rc4 (including) | 1.2.20-rc4 (including) |
| Libpng | Libpng | 1.2.20-rc5 (including) | 1.2.20-rc5 (including) |
| Libpng | Libpng | 1.2.20-rc6 (including) | 1.2.20-rc6 (including) |
| Libpng | Libpng | 1.2.21 (including) | 1.2.21 (including) |
| Libpng | Libpng | 1.2.21-beta1 (including) | 1.2.21-beta1 (including) |
| Libpng | Libpng | 1.2.21-beta2 (including) | 1.2.21-beta2 (including) |
| Libpng | Libpng | 1.2.21-rc1 (including) | 1.2.21-rc1 (including) |
| Libpng | Libpng | 1.2.21-rc2 (including) | 1.2.21-rc2 (including) |
| Libpng | Libpng | 1.2.21-rc3 (including) | 1.2.21-rc3 (including) |
| Libpng | Libpng | 1.2.22 (including) | 1.2.22 (including) |
| Libpng | Libpng | 1.2.22-beta1 (including) | 1.2.22-beta1 (including) |
| Libpng | Libpng | 1.2.22-beta2 (including) | 1.2.22-beta2 (including) |
| Libpng | Libpng | 1.2.22-beta2-1.2.21 (including) | 1.2.22-beta2-1.2.21 (including) |
| Libpng | Libpng | 1.2.22-beta3 (including) | 1.2.22-beta3 (including) |
| Libpng | Libpng | 1.2.22-beta3-1.2.21 (including) | 1.2.22-beta3-1.2.21 (including) |
| Libpng | Libpng | 1.2.22-beta4 (including) | 1.2.22-beta4 (including) |
| Libpng | Libpng | 1.2.22-beta4-1.2.21 (including) | 1.2.22-beta4-1.2.21 (including) |
| Libpng | Libpng | 1.2.22-rc1 (including) | 1.2.22-rc1 (including) |
| Libpng | Libpng | 1.2.22-rc1-1.2.21 (including) | 1.2.22-rc1-1.2.21 (including) |
| Libpng | Libpng | 1.2.23 (including) | 1.2.23 (including) |
| Libpng | Libpng | 1.2.23-beta01 (including) | 1.2.23-beta01 (including) |
| Libpng | Libpng | 1.2.23-beta01-1.2.22 (including) | 1.2.23-beta01-1.2.22 (including) |
| Libpng | Libpng | 1.2.23-beta02 (including) | 1.2.23-beta02 (including) |
| Libpng | Libpng | 1.2.23-beta02-1.2.22 (including) | 1.2.23-beta02-1.2.22 (including) |
| Libpng | Libpng | 1.2.23-beta03 (including) | 1.2.23-beta03 (including) |
| Libpng | Libpng | 1.2.23-beta03-1.2.22 (including) | 1.2.23-beta03-1.2.22 (including) |
| Libpng | Libpng | 1.2.23-beta04 (including) | 1.2.23-beta04 (including) |
| Libpng | Libpng | 1.2.23-beta04-1.2.22 (including) | 1.2.23-beta04-1.2.22 (including) |
| Libpng | Libpng | 1.2.23-beta05 (including) | 1.2.23-beta05 (including) |
| Libpng | Libpng | 1.2.23-beta05-1.2.22 (including) | 1.2.23-beta05-1.2.22 (including) |
| Libpng | Libpng | 1.2.23-rc01 (including) | 1.2.23-rc01 (including) |
| Libpng | Libpng | 1.2.23-rc01-1.2.22 (including) | 1.2.23-rc01-1.2.22 (including) |
| Libpng | Libpng | 1.2.24 (including) | 1.2.24 (including) |
| Libpng | Libpng | 1.2.24-beta01 (including) | 1.2.24-beta01 (including) |
| Libpng | Libpng | 1.2.24-beta01-1.2.23 (including) | 1.2.24-beta01-1.2.23 (including) |
| Libpng | Libpng | 1.2.24-beta02 (including) | 1.2.24-beta02 (including) |
| Libpng | Libpng | 1.2.24-beta02-1.2.23 (including) | 1.2.24-beta02-1.2.23 (including) |
| Libpng | Libpng | 1.2.24-beta03 (including) | 1.2.24-beta03 (including) |
| Libpng | Libpng | 1.2.24-beta03-1.2.23 (including) | 1.2.24-beta03-1.2.23 (including) |
| Libpng | Libpng | 1.2.24-rc01 (including) | 1.2.24-rc01 (including) |
| Libpng | Libpng | 1.2.24-rc01-1.2.23 (including) | 1.2.24-rc01-1.2.23 (including) |
| Libpng | Libpng | 1.2.25 (including) | 1.2.25 (including) |
| Libpng | Libpng | 1.2.25-beta01 (including) | 1.2.25-beta01 (including) |
| Libpng | Libpng | 1.2.25-beta02 (including) | 1.2.25-beta02 (including) |
| Libpng | Libpng | 1.2.25-beta03 (including) | 1.2.25-beta03 (including) |
| Libpng | Libpng | 1.2.25-beta04 (including) | 1.2.25-beta04 (including) |
| Libpng | Libpng | 1.2.25-beta05 (including) | 1.2.25-beta05 (including) |
| Libpng | Libpng | 1.2.25-beta06 (including) | 1.2.25-beta06 (including) |
| Libpng | Libpng | 1.2.25-rc01 (including) | 1.2.25-rc01 (including) |
| Libpng | Libpng | 1.2.25-rc02 (including) | 1.2.25-rc02 (including) |
| Libpng | Libpng | 1.2.26 (including) | 1.2.26 (including) |
| Libpng | Libpng | 1.2.26-beta01 (including) | 1.2.26-beta01 (including) |
| Libpng | Libpng | 1.2.26-beta02 (including) | 1.2.26-beta02 (including) |
| Libpng | Libpng | 1.2.26-beta03 (including) | 1.2.26-beta03 (including) |
| Libpng | Libpng | 1.2.26-beta04 (including) | 1.2.26-beta04 (including) |
| Libpng | Libpng | 1.2.26-beta05 (including) | 1.2.26-beta05 (including) |
| Libpng | Libpng | 1.2.26-rc01 (including) | 1.2.26-rc01 (including) |
| Libpng | Libpng | 1.2.30 (including) | 1.2.30 (including) |
| Libpng | Libpng | 1.2.31 (including) | 1.2.31 (including) |
| Libpng | Libpng | 1.2.33 (including) | 1.2.33 (including) |
| Libpng | Libpng | 1.2.34 (including) | 1.2.34 (including) |
| Red Hat Enterprise Linux 3 | RedHat | libpng-2:1.2.2-30 | * |
| Red Hat Enterprise Linux 3 | RedHat | libpng10-0:1.0.13-21 | * |
| Red Hat Enterprise Linux 4 | RedHat | libpng-2:1.2.7-3.el4_8.3 | * |
| Red Hat Enterprise Linux 4 | RedHat | libpng10-0:1.0.16-3.el4_8.4 | * |
| Red Hat Enterprise Linux 5 | RedHat | libpng-2:1.2.10-7.1.el5_5.3 | * |
| Libpng | Ubuntu | dapper | * |
| Libpng | Ubuntu | hardy | * |
| Libpng | Ubuntu | intrepid | * |
| Libpng | Ubuntu | jaunty | * |
| Libpng | Ubuntu | upstream | * |
| Mozilla-thunderbird | Ubuntu | dapper | * |
| Seamonkey | Ubuntu | devel | * |
| Seamonkey | Ubuntu | hardy | * |
| Seamonkey | Ubuntu | intrepid | * |
| Seamonkey | Ubuntu | jaunty | * |
| Seamonkey | Ubuntu | karmic | * |
| Thunderbird | Ubuntu | devel | * |
| Thunderbird | Ubuntu | hardy | * |
| Thunderbird | Ubuntu | intrepid | * |
| Thunderbird | Ubuntu | jaunty | * |
| Thunderbird | Ubuntu | karmic | * |
| Xulrunner | Ubuntu | devel | * |
| Xulrunner | Ubuntu | hardy | * |
| Xulrunner | Ubuntu | intrepid | * |
| Xulrunner | Ubuntu | jaunty | * |
| Xulrunner | Ubuntu | karmic | * |
| Xulrunner-1.9 | Ubuntu | hardy | * |
| Xulrunner-1.9 | Ubuntu | intrepid | * |
| Xulrunner-1.9 | Ubuntu | jaunty | * |
| Xulrunner-1.9.1 | Ubuntu | jaunty | * |
There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker. Some kinds of sensitive information include:
Information might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected. These parties include:
Information exposures can occur in different ways:
It is common practice to describe any loss of confidentiality as an “information exposure,” but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read. CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.