CVE-2020-27818CWE-120

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0

published December 8, 2020

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2020-12-08T00:04Z
EPSS history
Timeline
  • 08 DEC 00:04Z
    A flaw was found in the check_chunk_name() function of pngcheck-2.4.0
    cvelistv5