CVE-2020-28248

An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable…

published February 19, 2021

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02216 · 82.5th percentile
Published
2021-02-19T23:05Z
EPSS history
Timeline
  • 19 FEB 23:05Z
    An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable…
    cvelistv5