CVE-2019-17178

HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

CVE-2019-17178

CVE-2019-17178 concerns a memory leak in HuffmanTree_makeFromFrequencies() within lodepng.c, as used in WinPR-based FreeRDP and related products, reported for builds up to 2019-09-28. The underlying issue is a memory-management bug where a supplied realloc pointer (the first argument to realloc) ...