CVE-2017-16938: Optipng Project Optipng

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

Affected products

• Optipng Project Optipng: version 0.7.6 only

Published 2017-11-24. Last modified 2026-06-17.