The png_handle_tRNS function in pngrutil.c in libpng prior to 1.0.25 and 1.2.x prior to 1.2.17 allows remote malicious users to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
png_reference_library libpng |