CVE-2018-14550

Out-of-bounds write in libpng

Description

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

Patch Available

Fix available through Seal Security.  
No upgrade required, protect your application instantly.

Fix without upgrading

Score

8.8

Severity

High

Ecosystem

APK

Publish Date

March 22, 2021

Modified Date

February 22, 2024

Score Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Versions