CVE-2015-7700: Pngcrush Project Pngcrush

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

Affected products

• Pngcrush Project Pngcrush: up to and including 1.7.86

Published 2017-08-31. Last modified 2026-06-17.