Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the readpng function. An attacker can cause a crash or potentially execute arbitrary code by providing damaged PNG file to this function. Note: As mentioned by the package maintainer, the flawed logic wasn't introduc...

Integer overflow

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the readpng function...