AZL-71458 CVE-2025-66293 affecting package gdal 3.6.3-2

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing...

AZL-44676 CVE-2020-35538 affecting package gdal 3.6.3-2

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...