Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Pngdec Project records in CISA KEVNo Pngdec Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01051 · Published 2022-08-16 · No fix listed CWE-120
Priority LOW 31
PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00882 · Published 2022-08-16 · No fix listed CWE-400
Priority LOW 31
PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00893 · Published 2022-08-16 · No fix listed CWE-770
Priority LOW 30
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00861 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 30
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00861 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 30
PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00851 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 30
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00861 · Published 2022-08-16 · No fix listed CWE-787
Open these records in search →