CVE-2023-43907
Fixed in a distro release EPSS <1%CVSS 7.8
OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.
Products: optipng_project optipng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | optipng | 0.7.7-3.amzn2.0.1 |
| Debian 12 | optipng | no fix |
| Debian 13 | optipng | 0.7.8+ds-1 |
| Debian 14 | optipng | 0.7.8+ds-1 |
| SUSE Package Hub 15 SP4 | optipng | 0.7.8-bp154.3.5.1 |
| Ubuntu 16.04 LTS | optipng | no fix |
| Ubuntu 18.04 LTS | optipng | no fix |
| Ubuntu 20.04 LTS | optipng | no fix |
| Ubuntu 22.04 LTS | optipng | no fix |
| openSUSE Leap 15.4 | optipng | 0.7.8-bp154.3.5.1 |
| openSUSE Tumbleweed | optipng | 0.7.8-1.1 |