HOME VULNERABILITIESCVE-2009-0040

MEDIUM

CVE-2009-0040

CWE-824Published: February 22, 2009· Updated: Jun 16, 2026

6.8

CVSS v3.1

Official Description

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Technical Analysis

CVE-2009-0040 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityM

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Vendors & Products

Apple2 product(s)

iphone osmac os x

Debian1 product(s)

debian linux

Fedora1 product(s)

fedora

libpng1 product(s)

libpng

openSUSE1 product(s)

opensuse

SUSE3 product(s)

linux enterpriselinux enterprise desktoplinux enterprise server

Source: NVD CPE · 14 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt

ADVISORYhttp://secunia.com/advisories/33970

ADVISORYhttp://secunia.com/advisories/33976

ADVISORYhttp://security.gentoo.org/glsa/glsa-200903-28.xml

ADVISORYhttp://security.gentoo.org/glsa/glsa-201209-25.xml

ADVISORYhttp://support.apple.com/kb/HT3549

ADVISORYhttp://support.apple.com/kb/HT3613

ADVISORYhttp://support.apple.com/kb/HT3639

ADVISORYhttp://support.apple.com/kb/HT3757

ADVISORYhttp://www.kb.cert.org/vuls/id/649212

ADVISORYhttp://www.securityfocus.com/archive/1/501767/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/503912/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/505990/100/0/threaded

ADVISORYhttp://www.securityfocus.com/bid/33827

ADVISORYhttp://www.securityfocus.com/bid/33990

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA09-133A.html

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA09-218A.html

ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2009-0007.html

ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/48819

ADVISORYftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt

ADVISORYhttp://secunia.com/advisories/33970

ADVISORYhttp://secunia.com/advisories/33976

ADVISORYhttp://security.gentoo.org/glsa/glsa-200903-28.xml

ADVISORYhttp://security.gentoo.org/glsa/glsa-201209-25.xml

ADVISORYhttp://support.apple.com/kb/HT3549

ADVISORYhttp://support.apple.com/kb/HT3613

ADVISORYhttp://support.apple.com/kb/HT3639

ADVISORYhttp://support.apple.com/kb/HT3757

ADVISORYhttp://www.kb.cert.org/vuls/id/649212

ADVISORYhttp://www.securityfocus.com/archive/1/501767/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/503912/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/505990/100/0/threaded

ADVISORYhttp://www.securityfocus.com/bid/33827

ADVISORYhttp://www.securityfocus.com/bid/33990

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA09-133A.html

ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA09-218A.html

ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2009-0007.html

ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/48819

All References (164)

→

ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txtBroken Link · Vendor Advisory

→

http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txtProduct

→

http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.htmlMailing List

→

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlMailing List

→

http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlMailing List

→

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlBroken Link · Mailing List

→

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.htmlMailing List

→

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.htmlMailing List

→

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlMailing List

→

http://lists.vmware.com/pipermail/security-announce/2009/000062.htmlBroken Link

→

http://secunia.com/advisories/33970Broken Link · Vendor Advisory

→

http://secunia.com/advisories/33976Broken Link · Vendor Advisory

→

http://secunia.com/advisories/34137Broken Link

→

http://secunia.com/advisories/34140Broken Link

→

http://secunia.com/advisories/34143Broken Link

Quick Facts

CVE IDCVE-2009-0040

CVSS Score6.8 / 10

SeverityMEDIUM

WeaknessCWE-824

CISA KEVNo

Affected6 vendor(s)

PublishedFeb 22, 2009

Related CVEs (CWE-824)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2009-0040 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2009-0040·NVD