{"schema_version":"1.8.0","id":"CVE-2018-13785","published":"2018-07-09T13:29:00.443Z","modified":"2026-08-07T14:49:26.752512Z","related":["SUSE-SU-2018:3868-1","SUSE-SU-2018:3920-1","SUSE-SU-2018:3921-1","SUSE-SU-2018:3933-1","SUSE-SU-2018:3933-2","SUSE-SU-2018:4064-1","SUSE-SU-2018:4064-2","SUSE-SU-2019:0049-1","SUSE-SU-2019:0049-2","SUSE-SU-2019:0057-1","SUSE-SU-2019:0057-2","SUSE-SU-2019:0058-1","SUSE-SU-2019:1398-1","SUSE-SU-2019:1398-2","openSUSE-SU-2019:0043-1","openSUSE-SU-2019:1530-1","openSUSE-SU-2024:10876-1","openSUSE-SU-2024:10972-1"],"details":"In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pnggroup/libpng","events":[{"introduced":"b78804f9a2568b270ebd30eca954ef7447ba92f7"},{"last_affected":"b78804f9a2568b270ebd30eca954ef7447ba92f7"},{"fixed":"8a05766cb74af05c04c53e6c9d60c13fc4d59bf2"}],"database_specific":{"cpe":"cpe:2.3:a:libpng:libpng:1.6.34:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.6.34"},{"last_affected":"1.6.34"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.6.34","v1.6.35beta01","v1.6.34"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13785.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"282460725215391584583494778972512461376","length":987},"id":"CVE-2018-13785-a84a3113","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2","target":{"file":"pngrutil.c","function":"png_check_chunk_length"}},{"deprecated":false,"digest":{"line_hashes":["107966026133260924818778745914586419456","256164953430444557586735334527917876014","73440847196266064536662526583930052559","135968293059614300638946458008389177687","325492539394967073006475273665072020765","106295171231175941086144928405087290842","18891773824478661748387439301515208175"],"threshold":0.9},"id":"CVE-2018-13785-f0bc505a","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2","target":{"file":"pngrutil.c"}}],"vanir_signatures_modified":"2026-08-07T14:49:26Z"}}],"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105599"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1041889"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3000"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3001"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3002"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3003"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3007"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3008"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3533"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3534"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3671"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3672"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3779"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3852"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201908-10"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20181018-0001/"},{"type":"ADVISORY","url":"https://sourceforge.net/p/libpng/bugs/278/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3712-1/"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"FIX","url":"https://github.com/glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"},{"introduced":"18.04"},{"last_affected":"18.04"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"cpes":["cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.6.0-update201"},{"last_affected":"1.6.0-update201"},{"introduced":"1.7.0-update191"},{"last_affected":"1.7.0-update191"},{"introduced":"1.8.0-update181"},{"last_affected":"1.8.0-update181"},{"introduced":"11.0.0"},{"last_affected":"11.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:jdk"},{"cpes":["cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.6.0-update201"},{"last_affected":"1.6.0-update201"},{"introduced":"1.7.0-update191"},{"last_affected":"1.7.0-update191"},{"introduced":"1.8.0-update181"},{"last_affected":"1.8.0-update181"},{"introduced":"11.0.0"},{"last_affected":"11.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:jre"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}