CVE-2019-17178

CVE-2019-17178 concerns a memory leak in HuffmanTree_makeFromFrequencies() within lodepng.c, as used in WinPR-based FreeRDP and related products, reported for builds up to 2019-09-28. The underlying issue is a memory-management bug where a supplied realloc pointer (the first argument to realloc) ...

CVE-2022-44081

CVE-2022-44081 affects LodePNG v20220717, where a segmentation fault is triggered in pngdetail(). The vulnerability is locally exploitable with user interaction required; CVSS v3.1 base score 5.5 (Medium), availability impact (High) per the records. Connected sources provide no concrete exploit d...