description: A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.
problem types: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
vendor: n/a
product: libpng
versions:
version: libpng v1.6, status: affected
}