CVE-2019-7317

Published February 4th, 2019

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

2.6

LOW

Affected

1

PROJECT

Description

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

pnggroup/libpng

LIBPNG: Portable Network Graphics support, official libpng repository

GitHub

1.6K