CVE-2015-2158

Name of the Vulnerable Software and Affected Versions pngcrush versions prior to 1.7.84

Description The issue is caused by an off-by-one error in the pngcrush measure idat function, which can be exploited by remote attackers using a crafted PNG file. This could lead to a denial of service, resulting in an application crash, or potentially allow the execution of arbitrary code.

Recommendations For versions prior to 1.7.84, update to version 1.7.84 or later to resolve the issue. As a temporary workaround, consider restricting the processing of PNG files from untrusted sources until the update is applied.