pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafe_execute.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-7317.json"