Is CVE-2009-0040 being actively exploited?

CVE-2009-0040 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2009-0040?

CVE-2009-0040 has a CVSS 2.0 base score of 6.8 (MEDIUM).

CVE-2009-0040

MEDIUM · CVSS 6.8EPSS 4.8%EU EUVD

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Key facts

CVSS score: 6.8 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-824
EPSS score: 4.8% (92th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2009-0049)
Published: February 22, 2009
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2009-0049 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

apple / iphone os
apple / mac os x
debian / debian linux
debian / debian linux
fedoraproject / fedora
fedoraproject / fedora
libpng / libpng
opensuse / opensuse
opensuse / opensuse
opensuse / opensuse
suse / linux enterprise
suse / linux enterprise
suse / linux enterprise desktop
suse / linux enterprise server

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Apple Mac OS X v10.3.6 and Apple Mac OS X Server V10.3.6 - Apple Inc. - Common Criteria CCEVS-VR-0086-2005 - archived

References

ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt(Broken Link, Vendor Advisory)
http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt(Product)
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html(Mailing List)
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html(Mailing List)
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html(Mailing List)
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html(Broken Link, Mailing List)
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html(Mailing List)
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html(Mailing List)
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html(Mailing List)
http://lists.vmware.com/pipermail/security-announce/2009/000062.html(Broken Link)
http://secunia.com/advisories/33970(Broken Link, Vendor Advisory)
http://secunia.com/advisories/33976(Broken Link, Vendor Advisory)
http://secunia.com/advisories/34137(Broken Link)
http://secunia.com/advisories/34140(Broken Link)
http://secunia.com/advisories/34143(Broken Link)
http://secunia.com/advisories/34145(Broken Link)
http://secunia.com/advisories/34152(Broken Link)
http://secunia.com/advisories/34210(Broken Link)
http://secunia.com/advisories/34265(Broken Link)
http://secunia.com/advisories/34272(Broken Link)
http://secunia.com/advisories/34320(Broken Link)
http://secunia.com/advisories/34324(Broken Link)
http://secunia.com/advisories/34388(Broken Link)
http://secunia.com/advisories/34462(Broken Link)
http://secunia.com/advisories/34464(Broken Link)
http://secunia.com/advisories/35074(Broken Link)
http://secunia.com/advisories/35258(Broken Link)
http://secunia.com/advisories/35302(Broken Link)
http://secunia.com/advisories/35379(Broken Link)
http://secunia.com/advisories/35386(Broken Link)
http://secunia.com/advisories/36096(Broken Link)
http://security.gentoo.org/glsa/glsa-200903-28.xml(Third Party Advisory)
http://security.gentoo.org/glsa/glsa-201209-25.xml(Third Party Advisory)
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420(Mailing List)
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952(Mailing List)
http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com(Broken Link)
http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441(Broken Link)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1(Broken Link)
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1(Broken Link)
http://support.apple.com/kb/HT3549(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain