Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngsetquantize function. An attacker can execute arbitrary code or cause a denial of service by providing images with no histogram and the number of colors in the palette is more than twice the maximum support...

png -- CWE-122: Heap-based Buffer Overflow

https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 reports: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the...