Out-of-bounds read In mingw-libpng
Description
A flaw was found in libpng. A remote attacker could exploit this vulnerability to cause a Denial of Service (DoS) by supplying a specially crafted PNG image. Incomplete decompression of certain metadata chunks can leave a dangling pointer in the library's internal decompression state. When an application finishes processing without reading the image rows, libpng attempts to read from this invalid memory location, resulting in an application crash.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
rpm rhel7 | |
rpm rhel8 | |
rpm rhel9 | |
rpm rhel8 | |
rpm rhel9 | |
rpm rhel10 | |
rpm rhel8 | |
rpm rhel9 | |
rpm rhel10 | |
rpm rhel9 |
1-10 of 14
10
Aliases
1. 2. 3.