CVE-2015-7802
Fixed in a distro release EPSS 2%
gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file.
Products: optipng_project optipng, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | optipng | 0.7.6-1 |
| Debian 13 | optipng | 0.7.6-1 |
| Debian 14 | optipng | 0.7.6-1 |
| Ubuntu 14.04 LTS | optipng | 0.6.4-1ubuntu0.14.04.1 |