Pngdec Project Pngdec — known CVE vulnerabilities

Every CVE whose affected-product data names Pngdec Project Pngdec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-35011 — CVSS 8.8 (high): PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.
• CVE-2022-35008 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
• CVE-2022-35009 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
• CVE-2022-35007 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc…
• CVE-2022-35012 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.
• CVE-2022-35013 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp.
• CVE-2022-35010 — CVSS 6.5 (medium): PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.