CVE-2015-7700

Critical

Published: 31/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before version 1.7.87 allows attackers to have unspecified impact via unknown vectors.

Risk Assessment

Organizations may be exposed to unforeseen consequences of attacks that could lead to data integrity breaches or execution of malicious code.

Recommendation

It is recommended to update pngcrush to version 1.7.87 or later to mitigate this vulnerability.

Original NVD description (English source)

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.