{"id":"CVE-2018-14550","details":"An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.","aliases":["GHSA-qwwr-qc2p-6283"],"modified":"2026-07-07T08:50:02.467436576Z","published":"2019-07-10T12:15:10.750Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"oracle:mysql_workbench","cpes":["cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.0.23"}]},{"source":"CPE_STRING","vendor_product":"oracle:hyperion_infrastructure_technology","cpes":["cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.6.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.6.0"},{"last_affected":"11.1.2.6.0"}]}]},"references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201908-02"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20221028-0001/"},{"type":"FIX","url":"https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token"},{"type":"FIX","url":"https://github.com/glennrp/libpng/issues/246"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/clearlinux-pkgs/libpng","events":[{"introduced":"b97778ed8743ee81871dc469d17d06836c22cc47"},{"last_affected":"b97778ed8743ee81871dc469d17d06836c22cc47"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:libpng:libpng:1.6.35:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.6.35"},{"last_affected":"1.6.35"}]}}],"versions":["1.6.35","1.6.35-54"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14550.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/pnggroup/libpng","events":[{"introduced":"c17d164b4467f099b4484dfd4a279da0bc1dbd4a"},{"last_affected":"c17d164b4467f099b4484dfd4a279da0bc1dbd4a"}],"database_specific":{"cpe":"cpe:2.3:a:libpng:libpng:1.6.35:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.6.35"},{"last_affected":"1.6.35"}],"source":"CPE_STRING"}}],"versions":["1.6.35","v1.6.35"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14550.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}