What’s Vulnerable › Vulnerabilities

CVE-2017-6961

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-17 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value (within the PNG file) to determine the amount of memory to allocate.

Affected products

• Apng2Gif Project Apng2Gif: 1.7

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441

Get alerted when CVE-2017-6961 or the next vulnerability affects your stack