Vulnerability in Optipng

CVE-2012-4432

Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction."

EPSS: 0.052 (91.7th percentile) — read the EPSS interpretation.

Affected products

  • Optipng — versions 0.7.0, 0.7.1, 0.7.2
  • N/a — versions n/a

Weakness classification (CWE)

References