Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the pngmallocbase function with AddressSanitizer enabled, the program leaks memory in various locations, eventually leading to excessive memory consumption and causing the application to become unresponsive. An attacke...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the readpng function. An attacker can cause a crash or potentially execute arbitrary code by providing damaged PNG file to this function. Note: As mentioned by the package maintainer, the flawed logic wasn't introduc...