Pngdefry · Pngdefry · CVE-2017-7231
**Name of the Vulnerable Software and Affected Versions**
pngdefry versions prior to 2017-03-22
**Description**
The issue is related to a heap-based buffer-overflow vulnerability. This occurs because pngdefry fails to properly process a specially crafted png file, affecting the `process()` function in the `pngdefry.c` source file.
**Recommendations**
For versions prior to 2017-03-22, as a temporary workaround, consider disabling the `process()` function until a patch is available. Restrict access to the `pngdefry.c` source file to minimize the risk of exploitation. Avoid using pngdefry to process untrusted png files until the issue is resolved.