ALT Linux Team

Package pngquant update in sisyphus on 2016-07-28

ALT-PU-2016-1791-1

Package pngquant updated to version 2.7.1-alt1_1 for branch sisyphus in task 167826.

Closed vulnerabilities

Published: 2017-05-23
Modified: 2025-04-20

CVE-2016-5735

Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.

Severity: MEDIUM (6.8) Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Severity: HIGH (7.8) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top