CVE-2017-7231: Pngdefry Project Pngdefry

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file.

Affected products

• Pngdefry Project Pngdefry: up to and including 2017-03-22

Published 2017-03-22. Last modified 2026-06-17.