CVE-2018-13785

Name of the Vulnerable Software and Affected Versions libpng version 1.6.34 Oracle Java SE (affected versions not specified)

Description The issue is related to a wrong calculation that may trigger an integer overflow and resultant divide-by-zero while processing a crafted file, leading to a denial of service. An unspecified vulnerability in Oracle Java SE could allow an unauthenticated attacker to take control of the system.

Recommendations For libpng version 1.6.34, consider updating to a newer version to mitigate the risk. For Oracle Java SE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.