CVE-2018-14550

Name of the Vulnerable Software and Affected Versions Libpng versions prior to 1.6.36

Description The issue is related to a stack-based buffer overflow in the get token function in pnm2png.c of the libpng library, which can be exploited by a remote attacker to access sensitive data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 1.6.36, update to version 1.6.36 or later to resolve the issue. As a temporary workaround, consider restricting access to the get token function in pnm2png.c until a patch is available.