Vulnerability-Lookup

CVE-2026-3713 (GCVE-0-2026-3713)

Vulnerability from cvelistv5 – Published: 2026-03-08 06:02 – Updated: 2026-03-11 13:43 X_Open Source

Title

pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow

Summary

A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Severity ?

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow
CWE-119 - Memory Corruption

Assigner

VulDB

References

URL

Tags

	https://vuldb.com/?id.349658	vdb-entrytechnical-description
	https://vuldb.com/?ctiid.349658	signaturepermissions-required
	https://vuldb.com/?submit.761996	third-party-advisory
	https://github.com/pnggroup/libpng/issues/794	issue-tracking
	https://github.com/biniamf/pocs/tree/main/pnm2png	exploit
	https://github.com/pnggroup/libpng/	product

Impacted products

	Vendor	Product	Version
	pnggroup	libpng	Affected: 1.6.0 Affected: 1.6.1 Affected: 1.6.2 Affected: 1.6.3 Affected: 1.6.4 Affected: 1.6.5 Affected: 1.6.6 Affected: 1.6.7 Affected: 1.6.8 Affected: 1.6.9 Affected: 1.6.10 Affected: 1.6.11 Affected: 1.6.12 Affected: 1.6.13 Affected: 1.6.14 Affected: 1.6.15 Affected: 1.6.16 Affected: 1.6.17 Affected: 1.6.18 Affected: 1.6.19 Affected: 1.6.20 Affected: 1.6.21 Affected: 1.6.22 Affected: 1.6.23 Affected: 1.6.24 Affected: 1.6.25 Affected: 1.6.26 Affected: 1.6.27 Affected: 1.6.28 Affected: 1.6.29 Affected: 1.6.30 Affected: 1.6.31 Affected: 1.6.32 Affected: 1.6.33 Affected: 1.6.34 Affected: 1.6.35 Affected: 1.6.36 Affected: 1.6.37 Affected: 1.6.38 Affected: 1.6.39 Affected: 1.6.40 Affected: 1.6.41 Affected: 1.6.42 Affected: 1.6.43 Affected: 1.6.44 Affected: 1.6.45 Affected: 1.6.46 Affected: 1.6.47 Affected: 1.6.48 Affected: 1.6.49 Affected: 1.6.50 Affected: 1.6.51 Affected: 1.6.52 Affected: 1.6.53 Affected: 1.6.54 Affected: 1.6.55 cpe:2.3:a:libpng:libpng::::::::

Credits

biniam (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3713",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-11T13:42:50.906724Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-11T13:43:22.092Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "pnm2png"
          ],
          "product": "libpng",
          "vendor": "pnggroup",
          "versions": [
            {
              "status": "affected",
              "version": "1.6.0"
            },
            {
              "status": "affected",
              "version": "1.6.1"
            },
            {
              "status": "affected",
              "version": "1.6.2"
            },
            {
              "status": "affected",
              "version": "1.6.3"
            },
            {
              "status": "affected",
              "version": "1.6.4"
            },
            {
              "status": "affected",
              "version": "1.6.5"
            },
            {
              "status": "affected",
              "version": "1.6.6"
            },
            {
              "status": "affected",
              "version": "1.6.7"
            },
            {
              "status": "affected",
              "version": "1.6.8"
            },
            {
              "status": "affected",
              "version": "1.6.9"
            },
            {
              "status": "affected",
              "version": "1.6.10"
            },
            {
              "status": "affected",
              "version": "1.6.11"
            },
            {
              "status": "affected",
              "version": "1.6.12"
            },
            {
              "status": "affected",
              "version": "1.6.13"
            },
            {
              "status": "affected",
              "version": "1.6.14"
            },
            {
              "status": "affected",
              "version": "1.6.15"
            },
            {
              "status": "affected",
              "version": "1.6.16"
            },
            {
              "status": "affected",
              "version": "1.6.17"
            },
            {
              "status": "affected",
              "version": "1.6.18"
            },
            {
              "status": "affected",
              "version": "1.6.19"
            },
            {
              "status": "affected",
              "version": "1.6.20"
            },
            {
              "status": "affected",
              "version": "1.6.21"
            },
            {
              "status": "affected",
              "version": "1.6.22"
            },
            {
              "status": "affected",
              "version": "1.6.23"
            },
            {
              "status": "affected",
              "version": "1.6.24"
            },
            {
              "status": "affected",
              "version": "1.6.25"
            },
            {
              "status": "affected",
              "version": "1.6.26"
            },
            {
              "status": "affected",
              "version": "1.6.27"
            },
            {
              "status": "affected",
              "version": "1.6.28"
            },
            {
              "status": "affected",
              "version": "1.6.29"
            },
            {
              "status": "affected",
              "version": "1.6.30"
            },
            {
              "status": "affected",
              "version": "1.6.31"
            },
            {
              "status": "affected",
              "version": "1.6.32"
            },
            {
              "status": "affected",
              "version": "1.6.33"
            },
            {
              "status": "affected",
              "version": "1.6.34"
            },
            {
              "status": "affected",
              "version": "1.6.35"
            },
            {
              "status": "affected",
              "version": "1.6.36"
            },
            {
              "status": "affected",
              "version": "1.6.37"
            },
            {
              "status": "affected",
              "version": "1.6.38"
            },
            {
              "status": "affected",
              "version": "1.6.39"
            },
            {
              "status": "affected",
              "version": "1.6.40"
            },
            {
              "status": "affected",
              "version": "1.6.41"
            },
            {
              "status": "affected",
              "version": "1.6.42"
            },
            {
              "status": "affected",
              "version": "1.6.43"
            },
            {
              "status": "affected",
              "version": "1.6.44"
            },
            {
              "status": "affected",
              "version": "1.6.45"
            },
            {
              "status": "affected",
              "version": "1.6.46"
            },
            {
              "status": "affected",
              "version": "1.6.47"
            },
            {
              "status": "affected",
              "version": "1.6.48"
            },
            {
              "status": "affected",
              "version": "1.6.49"
            },
            {
              "status": "affected",
              "version": "1.6.50"
            },
            {
              "status": "affected",
              "version": "1.6.51"
            },
            {
              "status": "affected",
              "version": "1.6.52"
            },
            {
              "status": "affected",
              "version": "1.6.53"
            },
            {
              "status": "affected",
              "version": "1.6.54"
            },
            {
              "status": "affected",
              "version": "1.6.55"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "biniam (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-08T06:02:11.204Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-349658 | pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.349658"
        },
        {
          "name": "VDB-349658 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.349658"
        },
        {
          "name": "Submit #761996 | libpng pnm2png 1.8.0 Integer Overflow to Buffer Overflow",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.761996"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/pnggroup/libpng/issues/794"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/biniamf/pocs/tree/main/pnm2png"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/pnggroup/libpng/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-07T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-03-07T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-03-07T11:57:28.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-3713",
    "datePublished": "2026-03-08T06:02:11.204Z",
    "dateReserved": "2026-03-07T10:52:23.533Z",
    "dateUpdated": "2026-03-11T13:43:22.092Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-3713\",\"sourceIdentifier\":\"cna@vuldb.com\",\"published\":\"2026-03-08T06:16:11.460\",\"lastModified\":\"2026-03-09T13:35:07.393\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.\"},{\"lang\":\"es\",\"value\":\"Se ha encontrado una falla en pnggroup libpng hasta 1.6.55. Afectada por esta vulnerabilidad es la funci\u00f3n do_pnm2png del archivo contrib/pngminus/pnm2png.c del componente pnm2png. Esta manipulaci\u00f3n del argumento width/height causa desbordamiento de b\u00fafer basado en mont\u00edculo. El ataque est\u00e1 restringido a la ejecuci\u00f3n local. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema tempranamente a trav\u00e9s de un informe de problema pero a\u00fan no ha respondido.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":4.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"PROOF_OF_CONCEPT\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.8,\"impactScore\":3.4}],\"cvssMetricV2\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:S/C:P/I:P/A:P\",\"baseScore\":4.3,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.1,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"},{\"lang\":\"en\",\"value\":\"CWE-122\"}]}],\"references\":[{\"url\":\"https://github.com/biniamf/pocs/tree/main/pnm2png\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://github.com/pnggroup/libpng/\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://github.com/pnggroup/libpng/issues/794\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/?ctiid.349658\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/?id.349658\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/?submit.761996\",\"source\":\"cna@vuldb.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-3713\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-11T13:42:50.906724Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-11T13:43:06.161Z\"}}], \"cna\": {\"tags\": [\"x_open-source\"], \"title\": \"pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"biniam (VulDB User)\"}], \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 4.8, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P\"}}, {\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C\"}}, {\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C\"}}, {\"cvssV2_0\": {\"version\": \"2.0\", \"baseScore\": 4.3, \"vectorString\": \"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\"], \"vendor\": \"pnggroup\", \"modules\": [\"pnm2png\"], \"product\": \"libpng\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.6.0\"}, {\"status\": \"affected\", \"version\": \"1.6.1\"}, {\"status\": \"affected\", \"version\": \"1.6.2\"}, {\"status\": \"affected\", \"version\": \"1.6.3\"}, {\"status\": \"affected\", \"version\": \"1.6.4\"}, {\"status\": \"affected\", \"version\": \"1.6.5\"}, {\"status\": \"affected\", \"version\": \"1.6.6\"}, {\"status\": \"affected\", \"version\": \"1.6.7\"}, {\"status\": \"affected\", \"version\": \"1.6.8\"}, {\"status\": \"affected\", \"version\": \"1.6.9\"}, {\"status\": \"affected\", \"version\": \"1.6.10\"}, {\"status\": \"affected\", \"version\": \"1.6.11\"}, {\"status\": \"affected\", \"version\": \"1.6.12\"}, {\"status\": \"affected\", \"version\": \"1.6.13\"}, {\"status\": \"affected\", \"version\": \"1.6.14\"}, {\"status\": \"affected\", \"version\": \"1.6.15\"}, {\"status\": \"affected\", \"version\": \"1.6.16\"}, {\"status\": \"affected\", \"version\": \"1.6.17\"}, {\"status\": \"affected\", \"version\": \"1.6.18\"}, {\"status\": \"affected\", \"version\": \"1.6.19\"}, {\"status\": \"affected\", \"version\": \"1.6.20\"}, {\"status\": \"affected\", \"version\": \"1.6.21\"}, {\"status\": \"affected\", \"version\": \"1.6.22\"}, {\"status\": \"affected\", \"version\": \"1.6.23\"}, {\"status\": \"affected\", \"version\": \"1.6.24\"}, {\"status\": \"affected\", \"version\": \"1.6.25\"}, {\"status\": \"affected\", \"version\": \"1.6.26\"}, {\"status\": \"affected\", \"version\": \"1.6.27\"}, {\"status\": \"affected\", \"version\": \"1.6.28\"}, {\"status\": \"affected\", \"version\": \"1.6.29\"}, {\"status\": \"affected\", \"version\": \"1.6.30\"}, {\"status\": \"affected\", \"version\": \"1.6.31\"}, {\"status\": \"affected\", \"version\": \"1.6.32\"}, {\"status\": \"affected\", \"version\": \"1.6.33\"}, {\"status\": \"affected\", \"version\": \"1.6.34\"}, {\"status\": \"affected\", \"version\": \"1.6.35\"}, {\"status\": \"affected\", \"version\": \"1.6.36\"}, {\"status\": \"affected\", \"version\": \"1.6.37\"}, {\"status\": \"affected\", \"version\": \"1.6.38\"}, {\"status\": \"affected\", \"version\": \"1.6.39\"}, {\"status\": \"affected\", \"version\": \"1.6.40\"}, {\"status\": \"affected\", \"version\": \"1.6.41\"}, {\"status\": \"affected\", \"version\": \"1.6.42\"}, {\"status\": \"affected\", \"version\": \"1.6.43\"}, {\"status\": \"affected\", \"version\": \"1.6.44\"}, {\"status\": \"affected\", \"version\": \"1.6.45\"}, {\"status\": \"affected\", \"version\": \"1.6.46\"}, {\"status\": \"affected\", \"version\": \"1.6.47\"}, {\"status\": \"affected\", \"version\": \"1.6.48\"}, {\"status\": \"affected\", \"version\": \"1.6.49\"}, {\"status\": \"affected\", \"version\": \"1.6.50\"}, {\"status\": \"affected\", \"version\": \"1.6.51\"}, {\"status\": \"affected\", \"version\": \"1.6.52\"}, {\"status\": \"affected\", \"version\": \"1.6.53\"}, {\"status\": \"affected\", \"version\": \"1.6.54\"}, {\"status\": \"affected\", \"version\": \"1.6.55\"}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-07T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2026-03-07T01:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2026-03-07T11:57:28.000Z\", \"value\": \"VulDB entry last update\"}], \"references\": [{\"url\": \"https://vuldb.com/?id.349658\", \"name\": \"VDB-349658 | pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow\", \"tags\": [\"vdb-entry\", \"technical-description\"]}, {\"url\": \"https://vuldb.com/?ctiid.349658\", \"name\": \"VDB-349658 | CTI Indicators (IOB, IOC, IOA)\", \"tags\": [\"signature\", \"permissions-required\"]}, {\"url\": \"https://vuldb.com/?submit.761996\", \"name\": \"Submit #761996 | libpng pnm2png 1.8.0 Integer Overflow to Buffer Overflow\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://github.com/pnggroup/libpng/issues/794\", \"tags\": [\"issue-tracking\"]}, {\"url\": \"https://github.com/biniamf/pocs/tree/main/pnm2png\", \"tags\": [\"exploit\"]}, {\"url\": \"https://github.com/pnggroup/libpng/\", \"tags\": [\"product\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"Heap-based Buffer Overflow\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-119\", \"description\": \"Memory Corruption\"}]}], \"providerMetadata\": {\"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\", \"dateUpdated\": \"2026-03-08T06:02:11.204Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-3713\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-11T13:43:22.092Z\", \"dateReserved\": \"2026-03-07T10:52:23.533Z\", \"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"datePublished\": \"2026-03-08T06:02:11.204Z\", \"assignerShortName\": \"VulDB\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-3713

Vulnerability from fkie_nvd - Published: 2026-03-08 06:16 - Updated: 2026-03-09 13:35

Severity ?

5.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

References

	URL	Tags
	cna@vuldb.com	https://github.com/biniamf/pocs/tree/main/pnm2png
	cna@vuldb.com	https://github.com/pnggroup/libpng/
	cna@vuldb.com	https://github.com/pnggroup/libpng/issues/794
	cna@vuldb.com	https://vuldb.com/?ctiid.349658
	cna@vuldb.com	https://vuldb.com/?id.349658
	cna@vuldb.com	https://vuldb.com/?submit.761996

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
    },
    {
      "lang": "es",
      "value": "Se ha encontrado una falla en pnggroup libpng hasta 1.6.55. Afectada por esta vulnerabilidad es la funci\u00f3n do_pnm2png del archivo contrib/pngminus/pnm2png.c del componente pnm2png. Esta manipulaci\u00f3n del argumento width/height causa desbordamiento de b\u00fafer basado en mont\u00edculo. El ataque est\u00e1 restringido a la ejecuci\u00f3n local. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema tempranamente a trav\u00e9s de un informe de problema pero a\u00fan no ha respondido."
    }
  ],
  "id": "CVE-2026-3713",
  "lastModified": "2026-03-09T13:35:07.393",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.4,
        "source": "cna@vuldb.com",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 4.8,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-03-08T06:16:11.460",
  "references": [
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/biniamf/pocs/tree/main/pnm2png"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/pnggroup/libpng/"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/pnggroup/libpng/issues/794"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/?ctiid.349658"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/?id.349658"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/?submit.761996"
    }
  ],
  "sourceIdentifier": "cna@vuldb.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        },
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "cna@vuldb.com",
      "type": "Primary"
    }
  ]
}

MSRC_CVE-2026-3713

Vulnerability from csaf_microsoft - Published: 2026-03-02 00:00 - Updated: 2026-03-31 14:42

Summary

pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

CVE-2026-3713

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

CWE-122 - Heap-based Buffer Overflow

None Available There is no fix available for this vulnerability as of now

References

URL

Category

	https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self
	https://support.microsoft.com/lifecycle	external
	https://www.first.org/cvss	external
	https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-3713 pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-3713.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow",
    "tracking": {
      "current_release_date": "2026-03-31T14:42:17.000Z",
      "generator": {
        "date": "2026-04-01T07:38:22.481Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-3713",
      "initial_release_date": "2026-03-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-03-09T01:01:19.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-03-09T14:36:50.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-03-11T01:03:59.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        },
        {
          "date": "2026-03-27T01:38:02.000Z",
          "legacy_version": "4",
          "number": "4",
          "summary": "Information published."
        },
        {
          "date": "2026-03-31T14:42:17.000Z",
          "legacy_version": "5",
          "number": "5",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 libpng 1.6.55-1",
                "product": {
                  "name": "azl3 libpng 1.6.55-1",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 libpng 1.6.56-1",
                "product": {
                  "name": "azl3 libpng 1.6.56-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 libpng 1.6.56-1",
                "product": {
                  "name": "cbl2 libpng 1.6.56-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version_range",
                "name": "cbl2 libpng 1.6.55-1",
                "product": {
                  "name": "cbl2 libpng 1.6.55-1",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "libpng"
          },
          {
            "category": "product_name",
            "name": "cbl2 tensorflow 2.11.1-2",
            "product": {
              "name": "cbl2 tensorflow 2.11.1-2",
              "product_id": "6"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 tensorflow 2.16.1-11",
            "product": {
              "name": "azl3 tensorflow 2.16.1-11",
              "product_id": "5"
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 libpng 1.6.55-1 as a component of Azure Linux 3.0",
          "product_id": "17084-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 tensorflow 2.11.1-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-6"
        },
        "product_reference": "6",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 libpng 1.6.56-1 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 libpng 1.6.56-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 libpng 1.6.55-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 tensorflow 2.16.1-11 as a component of Azure Linux 3.0",
          "product_id": "17084-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3713",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "17086-6",
            "17084-5"
          ]
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "VulDB",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-4",
          "17084-2",
          "17086-1",
          "17086-3"
        ],
        "known_not_affected": [
          "17086-6",
          "17084-5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-3713 pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-3713.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-03-09T01:01:19.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-4"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-03-09T01:01:19.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-2"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-03-09T01:01:19.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-1"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-03-09T01:01:19.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 5.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          },
          "products": [
            "17084-4",
            "17084-2",
            "17086-1",
            "17086-3"
          ]
        }
      ],
      "title": "pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow"
    }
  ]
}

WID-SEC-W-2026-0638

Vulnerability from csaf_certbund - Published: 2026-03-08 23:00 - Updated: 2026-03-08 23:00

Summary

libpng: Schwachstelle ermöglicht Codeausführung

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Die libpng ist die offizielle Referenzbibliothek für die Darstellung und Manipulation von Bildern im Portable Network Graphics (PNG) Format.

Angriff: Ein lokaler Angreifer kann eine Schwachstelle in libpng ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.

Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows

CVE-2026-3713

References

URL

GHSA-FGC7-HPWC-CMC9

Vulnerability from github – Published: 2026-03-08 06:31 – Updated: 2026-03-08 06:31

Details

Severity ?

5.3 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

1.9 (Low)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-3713"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-03-08T06:16:11Z",
    "severity": "MODERATE"
  },
  "details": "A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
  "id": "GHSA-fgc7-hpwc-cmc9",
  "modified": "2026-03-08T06:31:10Z",
  "published": "2026-03-08T06:31:10Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3713"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pnggroup/libpng/issues/794"
    },
    {
      "type": "WEB",
      "url": "https://github.com/biniamf/pocs/tree/main/pnm2png"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pnggroup/libpng"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?ctiid.349658"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?id.349658"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?submit.761996"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-3713 (GCVE-0-2026-3713)

FKIE_CVE-2026-3713

MSRC_CVE-2026-3713

WID-SEC-W-2026-0638

GHSA-FGC7-HPWC-CMC9

Tags

Sightings

Nomenclature