Lucene search

K
osvGoogleOSV:GHSA-Q5WR-FVPQ-P67G
HistoryDec 10, 2021 - 5:23 p.m.

Integer Overflow in png-img

2021-12-1017:23:30
Google
osv.dev
4
integer overflow
png-img
heap-based buffer overflow

EPSS

0.005

Percentile

75.2%

An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file.

EPSS

0.005

Percentile

75.2%

Related for OSV:GHSA-Q5WR-FVPQ-P67G