CVE-2019-14373: Flif

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file.

Affected products

• Flif Flif: version 0.3 only

Published 2019-07-28. Last modified 2026-06-17.