CVE-2016-2191 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Optipng

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-787 — Out-of-bounds Write12 documents8 sources
Severity
6.5MEDIUMNVD
EPSS
2.1%
top 16.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Optipng Project OptipngCanonical Ubuntu LinuxDebian Linux+3 more
Timeline
PublishedApr 13
Latest updateMay 14

Description

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶Debianoptipng_project/optipng< 0.7.6-1+3
▶NVDoptipng/optipng0.7.2
▶NVDopensuse/leap42.1

Also affects: Debian Linux 7.0, 8.0, Ubuntu Linux 12.04, 14.04, 15.04

Patches

Patch: sourceforge.net ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

4
GHSA
GHSA-j2h5-f8x6-m62x: The bmp_read_rows function in pngxtern/pngxrbmp↗2022-05-14
▶
OSV
optipng vulnerabilities↗2016-04-18
▶
OSV
CVE-2016-2191: The bmp_read_rows function in pngxtern/pngxrbmp↗2016-04-13
▶
CVEList
CVE-2016-2191: The bmp_read_rows function in pngxtern/pngxrbmp↗2016-04-13
▶

📋Vendor Advisories

3
Ubuntu
OptiPNG vulnerabilities↗2016-04-18
▶
Red Hat
optipng: Invalid write while processing delta escapes without any boundary checking↗2016-04-04
▶
Debian
CVE-2016-2191: optipng - The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-3981 optipng: heap buffer overflow in the bmp_read_rows function↗2016-04-14
▶
Bugzilla
CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 optipng: various flaws fixed in 0.7.6 [fedora-all]↗2016-04-05
▶
Bugzilla
CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 optipng: various flaws fixed in 0.7.6 [epel-all]↗2016-04-05
▶
Bugzilla
CVE-2016-2191 optipng: Invalid write while processing delta escapes without any boundary checking↗2016-02-15
▶
CVE-2016-2191 — Optipng vulnerability | cvebase