CVE-2020-35511

A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2022-08-23

Last modified

2024-08-04

Weaknesses

CWE-119, CWE-126

Affected products

• Debian Linux (Debian)
• Pngcheck (Libpng)

References

• http://www.libpng.org/pub/png/apps/pngcheck.html
• https://lists.debian.org/debian-lts-announce/2022/12/msg00024.html
• https://www.debian.org/security/2022/dsa-5300