CVE-2016-5735

Integer overflow in the rwpngreadimage24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.

References

Affected packages

Git / github.com/pornel/pngquant

Affected ranges

Type: GIT
Repo: https://github.com/pornel/pngquant
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

cd14e0881a3e1f8157947e63ffd846c9f7a55c82

Affected versions

1.*

1.2a

1.2b

1.3a

1.3b

1.4.1

1.4.2

1.4b

1.5.0

1.5.1

1.5.1a1

1.6

1.6.1

1.6.2

1.6.3

1.6.4

1.7.0

1.7.1

1.7.2

1.7.3

1.8.0

1.8.1

1.8.2

1.8.3

1.8.4

2.*

2.0.0

2.0.1

2.0.2

2.1.0

2.2.0

2.3.0

2.3.1

2.3.2

2.3.3

2.3.4

2.3.5

2.3.6

2.4.0

2.4.0.1

2.4.1

2.5.0

2.5.1

2.5.2

2.6.0

2.7.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5735.json"