CVE-2021-44339

Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats version 203defd

Description The issue is related to a Buffer Overflow, specifically a heap-buffer-overflow, that occurs when using the function of the ok-file-formats project. This overflow happens in the ok png transform scanline() function located in the "/ok png.c" file at line 712.

Recommendations For version 203defd, consider disabling the ok png transform scanline() function as a temporary workaround until a patch is available. Restrict access to the /ok png.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.