CVE-2017-7231

Name of the Vulnerable Software and Affected Versions pngdefry versions prior to 2017-03-22

Description The issue is related to a heap-based buffer-overflow vulnerability. This occurs because pngdefry fails to properly process a specially crafted png file, affecting the process() function in the pngdefry.c source file.

Recommendations For versions prior to 2017-03-22, as a temporary workaround, consider disabling the process() function until a patch is available. Restrict access to the pngdefry.c source file to minimize the risk of exploitation. Avoid using pngdefry to process untrusted png files until the issue is resolved.