AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-5063

MEDIUM · CVSS 5 EPSS 1.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-08-31 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It may lead to a denial-of-service condition.

CVE
CVE-2009-5063
Severity
MEDIUM
CVSS
5
EPSS
1.50%

Original NVD Description

Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.