CVE-2016-3981

OptiPNG (before 0.7.6) is affected by CVE-2016-3981 due to a heap-based overflow in bmp_read_rows (pngxrbmp.c), enabling potential out-of-bounds access and possible code execution or crash.iva Attack vector: crafted image file; impact: DoS or code execution. Mitigation: upgrade to OptiPNG 0.7.6+ ...

CVE-2023-43907

Summary: CVE-2023-43907 affects OptiPNG v0.7.7, where a global buffer overflow can be triggered via the “buffer” variable in gifread.c. The CVSS data assigns a HIGH impact with LOCAL attack vector, requiring user interaction, and a base score of 7.8. The interconnected advisories indicate that a ...

CVE-2017-1000229

OptiPNG 0.7.6 is vulnerable to an integer overflow in minitiff_read_info(), enabling potential remote code execution or denial of service. The CVE is tracked as CVE-2017-1000229. Public advisories and vendor updates indicate a security fix was released (e.g., Fedora/RHEL advisories and Gentoo GLS...

CVE-2009-0749

OptiPNG 0.6.2 and earlier is affected by a use-after-free in GIFReadNextExtension in lib/pngxtern/gif/gifread.c, leading to memory corruption and potential denial of service when processing crafted GIFs. Multiple advisories (OpenSUSE/SUSE and Gentoo GLSA) cite CVE-2009-0749 and describe the GIF h...

CVE-2015-7801

CVE-2015-7801 is a use-after-free vulnerability in OptiPNG 0.6.4 . A crafted PNG file can cause the vulnerable PNG-processing code to execute arbitrary code on the affected system. The CVE is documented with high severity (CVSS v3 base 8.8) and confirms remote code execution via crafted input . T...

CVE-2017-16938

OptiPNG 0.7.6 is affected by a global buffer overflow in the GIF processing path, specifically due to an uncontrolled loop in gifread.c's LZWReadByte, which can allow remote-triggered denial-of-service or other unspecified impact. Affected component: OptiPNG (gif processing). Underlying cause: un...

CVE-2016-3982

OptiPNG contains an off-by-one error in bmp_rle4_fread() in pngxrbmp.c, affecting versions before 0.7.6. This defect can trigger a heap-based buffer overflow, potentially leading to denial of service or arbitrary code execution when processing crafted BMP/png images. Multiple connected sources co...

CVE-2015-7802

OptiPNG/gif2png is affected by CVE-2015-7802 due to a flaw in gifread.c that can trigger a denial of service via a crafted GIF file, caused by an uninitialized memory read. The issue is present in OptiPNG versions before 0.7.6. Affected component: gifread.c in gif2png; impact: remote DoS with uni...