CVE-2017-6960: APNG2GIF Project APNG2GIF
High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the imagesize variable.
Affected products
- APNG2GIF Project APNG2GIF: version 1.7 only
- Canonical Ubuntu Linux: version 16.04 only
- Debian Debian Linux: version 8.0 only
Published 2017-03-17. Last modified 2026-06-17.