CVE-2021-4214: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Libpng Libpng: version 1.6.0 only
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified

Published 2022-08-24. Last modified 2026-06-17.