42 matches found
CVE-2026-112020
A flaw was found in lodepng. A missing bounds check in the getFilterTypesInterlaced function allows an out-of-bounds memory read when handling decompressed image data. An attacker could exploit this flaw by supplying a specially crafted interlaced PNG image for processing, resulting in a Denial o...
CVE-2026-112020
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
CVE-2026-112020 LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
EUVD-2026-103473
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
CVE-2026-112020
The LodePNG library (versions through 20261006 ) is vulnerable to a heap out-of-bounds read in the lodepng::getFilterTypesInterlaced() function located in lodepng_util.cpp. The root cause is a lack of bounds checks on decompressed IDAT data . An attacker can exploit this by providing a crafted in...
PT-2026-116624
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepng util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
CVE-2026-112020: Out-of-bounds Read
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
Lode Vandevenne has a buffer error vulnerability
Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...
EUVD-2019-7612
Malware in sbrugna...
EUVD-2022-47032
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-44081
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. CVE-2022-44081 Note that Nessus relies on the presence of the packa...
Linux Distros Unpatched Vulnerability : CVE-2019-17178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied...
CVE-2022-44081
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...
CVE-2019-17178
HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...
SUSE CVE-2019-17178
HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...
AZL-43651 CVE-2022-44081 affecting package zopfli 1.0.3-7
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...
CVE-2022-44081
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...
AZL-45012 CVE-2022-44081 affecting package zopfli 1.0.3-7
Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...
