ZeroHour

CVE-2021-4214

PoC ×2
CVSS 3.1
5.5 medium
EPSS
<1%p43
Published
()
Modified
Description

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.

Vendors
libpngdebiannetapp
Products
libpng, debian linux, ontap select deploy administration utility
Weakness
CWE-120, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.