1 matches found
Use after free in `DecodePng` kernel
ImpactA malicious user can cause a use after free behavior when decoding PNG images:ccif / ... error conditions ... / png::CommonFreeDecode; OPREQUIREScontext, false, errors::InvalidArgument"PNG size too large for int: ", decode.width, " by ", decode.height; After png::CommonFreeDecode gets calle...
7.6CVSS6.8AI score0.00731EPSS
SaveExploits1References9Affected Software1
20