CVE-2006-5793
CVE-2006-5793 is a low-severity vulnerability in Greg Roelofs Libpng with a CVSS 2.0 base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-20.
Key facts
- Severity: Low (CVSS 2.0 base score 2.6)
- EPSS exploit prediction: 2% (75th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-20
- Affected product: Greg Roelofs Libpng
- Published:
- Last modified:
Description
The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.
Frequently asked questions
- What is CVE-2006-5793?
- The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.
- How severe is CVE-2006-5793?
- CVE-2006-5793 has a CVSS 2.0 base score of 2.6, rated low severity.
- Is CVE-2006-5793 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (75th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-5793?
- CVE-2006-5793 primarily affects Greg Roelofs Libpng. In total, 18 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-5793?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-5793 published?
- CVE-2006-5793 was published on 2006-11-17 and last updated on 2026-06-16.
References
- http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
- http://bugs.gentoo.org/attachment.cgi?id=101400&action=view
- http://bugs.gentoo.org/show_bug.cgi?id=154380
- http://docs.info.apple.com/article.html?artnum=307562
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://secunia.com/advisories/22889
- http://secunia.com/advisories/22900
- http://secunia.com/advisories/22941
- http://secunia.com/advisories/22950
- http://secunia.com/advisories/22951
- http://secunia.com/advisories/22956
- http://secunia.com/advisories/22958
- http://secunia.com/advisories/23208
- http://secunia.com/advisories/23335
- http://secunia.com/advisories/25329
- http://secunia.com/advisories/25742
- http://secunia.com/advisories/29420
- http://security.gentoo.org/glsa/glsa-200611-09.xml
- http://securitytracker.com/id?1017244
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.465035
- http://sourceforge.net/project/shownotes.php?release_id=464278
- http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm
- http://www.coresecurity.com/?action=item&id=2148
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:209
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:210
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:211
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:212
- http://www.novell.com/linux/security/advisories/2006_28_sr.html
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.036.html
- http://www.redhat.com/support/errata/RHSA-2007-0356.html
Affected products (18)
- cpe:2.3:a:greg_roelofs:libpng:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.7rc1:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:greg_roelofs:libpng:1.2.12:*:*:*:*:*:*:*
More vulnerabilities in Greg Roelofs Libpng
- CVE-2004-0597 — Critical (CVSS 10.0): Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute…
- CVE-2006-3334 — High (CVSS 7.5): Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent…
- CVE-2002-1363 — High (CVSS 7.5): Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows…
- CVE-2002-0660 — High (CVSS 7.5): Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating…
- CVE-2006-0481 — Medium (CVSS 5.0): Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a…
- CVE-2004-0598 — Medium (CVSS 5.0): The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service…
All CVEs affecting Greg Roelofs Libpng →
Other CWE-20 (Improper Input Validation) vulnerabilities
- CVE-2026-48316 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48281 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48277 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48055 — Critical (CVSS 10.0): Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and…
- CVE-2026-34910 — Critical (CVSS 10.0): A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…
- CVE-2026-33587 — Critical (CVSS 10.0): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and…
Browse all CWE-20 (Improper Input Validation) vulnerabilities →