Pngcrush Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pngcrush Project records in CISA KEV

No Pngcrush Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pngcrush 2 records MEDIUM

Records

2 records

TI-2015-06397 CVE-2015-7700 · GHSA-4q9g-gjc2-2pf4

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87…

MEDIUM 46

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02272 Published 2017-08-31 Will not fix CWE-415

TI-2015-01934 CVE-2015-2158 · GHSA-qm7x-p4cx-r7pj

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before…

LOW 39

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02884 Published 2017-10-06 No fix listed CWE-189

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0