CVE-2008-5101: Optipng

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."

Affected products

• Optipng Optipng: version 0.6 only; version 0.6.1 only

Published 2008-11-17. Last modified 2026-06-16.