CVE-2018-14876: Undefined Security Weakness

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

CVE-2018-12109: Out-of-bounds Write

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC ::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM imag...