CVE-2004-0597
10.0
CVSS v2.0 Base Score
83.21%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
Published: 11/23/2004
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
10
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
83.21%HIGH Exploitation Risk
99th percentile
This vulnerability has a 83.21% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other