PT-2021-30840 · Mageia · Pngcheck

Published 2021-03-05 · Updated 2021-03-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description.

Description The issue involves a buffer-overrun bug related to the MNG LOOP chunk, which can be detected even in PNG files when the -s option is used. Additionally, there is a buffer overrun for certain invalid MNG PPLT chunk contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2021-0115

Affected Products

Pngcheck

References · 4

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/XTD56567QSWLCTKBJNTCF6HB5GLJZCHX · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0115.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0115 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=28331 · Note