What’s Vulnerable › Vulnerabilities

CVE-2017-6960

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-17 · updated 2026-06-17
• Weakness: CWE-190

Description

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the imagesize variable.

Affected products

• Apng2Gif Project Apng2Gif: 1.7
• Canonical Ubuntu Linux: 16.04
• Debian Linux: 8.0

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854367
• https://lists.debian.org/debian-lts-announce/2020/03/msg00039.html
• https://usn.ubuntu.com/4513-1/
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854367
• https://lists.debian.org/debian-lts-announce/2020/03/msg00039.html
• https://usn.ubuntu.com/4513-1/

Get alerted when CVE-2017-6960 or the next vulnerability affects your stack