CVE-2017-6960

High

Published: 17/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in apng2gif 1.7 related to an integer overflow, resulting in a heap-based buffer over-read. This issue is associated with the load_apng function and the imagesize variable.

Risk Assessment

The integer overflow may lead to the disclosure of sensitive data or allow an attacker to execute malicious code. Organizations should be aware of the potential risks associated with using this library.

Recommendation

It is recommended to update to the latest version of apng2gif to mitigate the risks associated with this vulnerability.

Other vulnerabilities in apng2gif 1.7

CVE-2017-6962High
An issue was discovered in apng2gif 1.7 related to an integer overflow leading to a heap-based buffer overflow. This is associated with the read_chunk function making an unchecked addition of 12.

Original NVD description (English source)

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the imagesize variable.