PNGDec commit 8abf6be exists to contain a global buffer overflow via inflate_fast at /src/inffast.c.
pngdec project pngdec 1.0.0
pngdec project pngdec 1.0.1