TI-2017-13400 CVE-2017-18215 · GHSA-99x2-jhx8-rqm7xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment…Priority MEDIUM 46xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02208 · Published 2018-03-05 · No fix listed CWE-787