CVE-2016-5637

Name of the Vulnerable Software and Affected Versions libbpg versions 0.9.5 through 0.9.7

Description The issue is related to a "type confusion" problem in the restore tqb pixels function, which mishandles the transquant bypass enable flag value. This allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image.

Recommendations For libbpg versions 0.9.5 through 0.9.7, consider disabling the restore tqb pixels function until a patch is available to prevent potential exploitation.