CVE-2008-1382

CVE-2008-1382 is a high-severity vulnerability in Libpng with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.

Key facts

• Severity: High (CVSS 2.0 base score 7.5)
• EPSS exploit prediction: 6% (92nd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Libpng
• Published: 2008-04-14
• Last modified: 2026-06-16

Description

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.

Frequently asked questions

What is CVE-2008-1382?

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.

How severe is CVE-2008-1382?

CVE-2008-1382 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2008-1382 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 6% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2008-1382?

CVE-2008-1382 primarily affects Libpng. In total, 310 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2008-1382?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2008-1382 published?

CVE-2008-1382 was published on 2008-04-14 and last updated on 2026-06-16.

References

• http://libpng.sourceforge.net/Advisory-1.2.26.txt
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
• http://secunia.com/advisories/29678
• http://secunia.com/advisories/29792
• http://secunia.com/advisories/29957
• http://secunia.com/advisories/29992
• http://secunia.com/advisories/30009
• http://secunia.com/advisories/30157
• http://secunia.com/advisories/30174
• http://secunia.com/advisories/30402
• http://secunia.com/advisories/30486
• http://secunia.com/advisories/31882
• http://secunia.com/advisories/33137
• http://secunia.com/advisories/34152
• http://secunia.com/advisories/34388
• http://secunia.com/advisories/35074
• http://secunia.com/advisories/35258
• http://secunia.com/advisories/35302
• http://secunia.com/advisories/35386
• http://security.gentoo.org/glsa/glsa-200804-15.xml
• http://security.gentoo.org/glsa/glsa-200805-10.xml
• http://security.gentoo.org/glsa/glsa-200812-15.xml
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1
• http://support.apple.com/kb/HT3549
• http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151

Affected products (310)

• cpe:2.3:a:libpng:libpng:1.0.6:a:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:d:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:e:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:f:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:g:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:h:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:i:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.6:j:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta11:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta12:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta13:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta14:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta15:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta16:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta17:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:beta18:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:rc1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.7:rc2:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:beta1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:beta2:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:beta3:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:beta4:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.8:rc1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta10:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta2:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta3:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta4:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta5:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta6:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta7:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta8:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:beta9:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:rc1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.9:rc2:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.10:beta1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.10:rc1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.11:beta1:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*
• cpe:2.3:a:libpng:libpng:1.0.11:beta3:*:*:*:*:*:*

More vulnerabilities in Libpng

• CVE-2017-12652 — Critical (CVSS 9.8): libpng before 1.6.32 does not properly check the length of chunks against the user limit.
• CVE-2010-1205 — Critical (CVSS 9.8): Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications,…
• CVE-2018-14550 — High (CVSS 8.8): An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow…
• CVE-2015-8540 — High (CVSS 8.8): Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66,…
• CVE-2015-0973 — High (CVSS 8.8): Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows…
• CVE-2014-9495 — High (CVSS 8.8): Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when…

All CVEs affecting Libpng →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →