2 matches found
PT-2019-13650
Name of the Vulnerable Software and Affected Versions Free Lossless Image Format FLIF version 0.3 Description An issue was discovered in the image save png function in image/image-png.cpp, allowing attackers to trigger a heap-based buffer over-read in libpng via a crafted flif file. Recommendatio...
7.8CVSS0.00969EPSS
SaveExploits1References3
PT-2018-12774
Name of the Vulnerable Software and Affected Versions FLIF version 0.3 Description An issue in the image save png function in image/image-png.cpp allows attackers to trigger a longjmp, resulting in an uninitialized stack frame after a libpng error related to the IHDR image width. Recommendations...
5.5CVSS0.00867EPSS
SaveExploits1References18
20