Libpng Pngcheck vulnerabilities

2 known vulnerabilities affecting libpng/pngcheck.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1LOW1

Vulnerabilities

Page 1 of 1

CVE-2020-35511HIGHCVSS 7.8v2.4.0vpngcheck-2.4.02022-08-23

CVE-2020-35511 [HIGH] CWE-126 CVE-2020-35511: A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) vi A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.

CVE-2020-27818LOWCVSS 3.3v2.4.0vpngcheck-2.4.02020-12-08

CVE-2020-27818 [LOW] CWE-120 CVE-2020-27818: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a ma A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.