CVE ID:	CVE-2019-7317
Description:	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after- free because png_image_free_function is called under png_safe_execute.
Test IDs:	1.3.6.1.4.1.25623.1.0.843990   1.3.6.1.4.1.25623.1.0.876030   1.3.6.1.4.1.25623.1.1.10.2019.0126   1.3.6.1.4.1.25623.1.1.2.2019.1787   1.3.6.1.4.1.25623.1.0.704435
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7317 BugTraq ID: 108098 http://www.securityfocus.com/bid/108098 Bugtraq: 20190417 [slackware-security] libpng (SSA:2019-107-01) (Google Search) https://seclists.org/bugtraq/2019/Apr/30 Bugtraq: 20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update (Google Search) https://seclists.org/bugtraq/2019/Apr/36 Bugtraq: 20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01) (Google Search) https://seclists.org/bugtraq/2019/May/56 Bugtraq: 20190523 [SECURITY] [DSA 4448-1] firefox-esr security update (Google Search) https://seclists.org/bugtraq/2019/May/59 Bugtraq: 20190527 [SECURITY] [DSA 4451-1] thunderbird security update (Google Search) https://seclists.org/bugtraq/2019/May/67 https://security.netapp.com/advisory/ntap-20190719-0005/ https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us Debian Security Information: DSA-4435 (Google Search) https://www.debian.org/security/2019/dsa-4435 Debian Security Information: DSA-4448 (Google Search) https://www.debian.org/security/2019/dsa-4448 Debian Security Information: DSA-4451 (Google Search) https://www.debian.org/security/2019/dsa-4451 https://security.gentoo.org/glsa/201908-02 http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 https://github.com/glennrp/libpng/issues/275 https://github.com/glennrp/libpng/issues/275 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html RedHat Security Advisories: RHSA-2019:1265 https://access.redhat.com/errata/RHSA-2019:1265 RedHat Security Advisories: RHSA-2019:1267 https://access.redhat.com/errata/RHSA-2019:1267 RedHat Security Advisories: RHSA-2019:1269 https://access.redhat.com/errata/RHSA-2019:1269 RedHat Security Advisories: RHSA-2019:1308 https://access.redhat.com/errata/RHSA-2019:1308 RedHat Security Advisories: RHSA-2019:1309 https://access.redhat.com/errata/RHSA-2019:1309 RedHat Security Advisories: RHSA-2019:1310 https://access.redhat.com/errata/RHSA-2019:1310 RedHat Security Advisories: RHSA-2019:2494 https://access.redhat.com/errata/RHSA-2019:2494 RedHat Security Advisories: RHSA-2019:2495 https://access.redhat.com/errata/RHSA-2019:2495 RedHat Security Advisories: RHSA-2019:2585 https://access.redhat.com/errata/RHSA-2019:2585 RedHat Security Advisories: RHSA-2019:2590 https://access.redhat.com/errata/RHSA-2019:2590 RedHat Security Advisories: RHSA-2019:2592 https://access.redhat.com/errata/RHSA-2019:2592 RedHat Security Advisories: RHSA-2019:2737 https://access.redhat.com/errata/RHSA-2019:2737 SuSE Security Announcement: openSUSE-SU-2019:1484 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html SuSE Security Announcement: openSUSE-SU-2019:1534 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html SuSE Security Announcement: openSUSE-SU-2019:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html SuSE Security Announcement: openSUSE-SU-2019:1912 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html SuSE Security Announcement: openSUSE-SU-2019:1916 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html https://usn.ubuntu.com/3962-1/ https://usn.ubuntu.com/3991-1/ https://usn.ubuntu.com/3997-1/ https://usn.ubuntu.com/4080-1/ https://usn.ubuntu.com/4083-1/