xvpng.c in xv 3.10a has memory corruption out-of-bounds write when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value...
9.8CVSS9.8AI score0.0225EPSS
SaveExploits0References3
OSV•added 2018/03/05 6:29 p.m.•5 views
CVE-2017-18215
xvpng.c in xv 3.10a has memory corruption out-of-bounds write when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value...