Wind River Support Network

HomeDefectsLIN10-5446

Fixed

LIN10-5446 : Security Advisory - libpng - CVE-2019-7317

Created: Feb 14, 2019 Updated: Jun 12, 2019

Resolved Date: May 16, 2019

Found In Version: 10.17.41.1

Fix Version: 10.17.41.16

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

png_image_free in png.c in libpng 1.6.36 has a use-after-free because png_image_free_function is called under png_safe_execute.

https://nvd.nist.gov/vuln/detail/CVE-2019-7317

CVEs

CVE-2019-7317