Vulnerabilities > Optipng

DATE CVE VULNERABILITY TITLE RISK
2016-04-13 CVE-2016-2191 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.
4.3
2012-10-01 CVE-2012-4432 Resource Management Errors vulnerability in Optipng
Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction."
network
low complexity
optipng CWE-399
7.5
2008-11-17 CVE-2008-5101 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Optipng 0.6/0.6.1
Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."
network
optipng CWE-119
critical
9.3