PT-2021-11460

CVE-2020-28248

Published

2021-02-19

Updated

2021-12-10

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: png-img versions prior to 3.1.0

Description: The issue is caused by an integer overflow in the PngImg::InitStorage () function, leading to under-allocation of heap memory. This results in a heap-based buffer overflow when a crafted PNG file is loaded.

Recommendations: For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the PngImg::InitStorage () function until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Anticomputer

Bas Alberts

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

CWE-787: Out-of-bounds Write