CVE-2018-10972: Flif Free Lossless Image Format

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC::process function in transform/palette_C.hpp allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted file.

Affected products

• Flif Free Lossless Image Format: version 0.3 only

Published 2018-05-10. Last modified 2026-06-17.