CVE-2017-6961

An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value (within the PNG file) to determine the amount of memory to allocate.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-03-17

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Apng2gif (Apng2gif Project)

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854441