CVE-2018-13785: Divide By Zero

July 9, 2018 (updated September 8, 2020)

In libpng, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

References

nvd.nist.gov/vuln/detail/CVE-2018-13785

Code Behaviors & Features

Detect and mitigate CVE-2018-13785 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →