CVE-2017-7231

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-03-22 · updated 2026-06-17
Weakness: CWE-119

Description

pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file.

Affected products

Pngdefry Project Pngdefry: through 2017-03-22

References

http://www.securityfocus.com/bid/97037
https://github.com/Tatsh/pngdefry/issues/1
http://www.securityfocus.com/bid/97037
https://github.com/Tatsh/pngdefry/issues/1

Get alerted when CVE-2017-7231 or the next vulnerability affects your stack