Wind River Support Network

HomeDefectsLIN1018-3558

Fixed

LIN1018-3558 : Security Advisory - libpng - CVE-2019-7317

Created: Feb 14, 2019 Updated: Apr 27, 2019

Resolved Date: Apr 23, 2019

Found In Version: unknown

Fix Version: 10.18.44.6

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

png_image_free in png.c in libpng 1.6.36 has a use-after-free because png_image_free_function is called under png_safe_execute.

https://nvd.nist.gov/vuln/detail/CVE-2019-7317

CVEs

CVE-2019-7317