OP
Product
Optipng
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 0
Watch
Add Optipng to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7801 | 8.8 | Apr 20 | Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file Affected: through 0.6.4 |
| CVE-2016-3982 | 8.8 | Apr 13 | Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and… Affected: through 0.7.5 |
| CVE-2023-43907 | 7.8 | Oct 1 | OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c Affected: 0.7.7 |
| CVE-2017-16938 | 7.8 | Nov 24 | A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file,… Affected: 0.7.6 |
| CVE-2017-1000229 | 7.8 | Nov 17 | Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service Affected: 0.7.6 |
| CVE-2016-3981 | 7.8 | Apr 13 | Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write… Affected: through 0.7.5 |
| CVE-2009-0749 | 7.8 | Mar 2 | Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial… Affected: through 0.6.2 |
Showing 7