Denial Of Service (DoS)

png-img is vulnerable to denial of service. The vulnerability exists as an attacker is able to pass a malicious PNG file to PngImg::InitStorage_() function of png-img to trigger an under-allocation of heap memory, resulting in an application crash.