LuPng Buffer Over-Read Vulnerability

LuPng is a PNG format decoder/encoder. A heap buffer over-read vulnerability exists in the 'internalPrintf' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

CVE-2018-18581

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c...