CVE-2024-41438

Description

A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.

Affected Platforms

Weakness Type

CWE-122

References

• https://github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_st…
• https://github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_st…
• https://github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_st…
• https://github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_st…
• https://github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_st…
• https://github.com/Helson-S/FuzzyTesting/tree/master/hicolor/heapof-r65280-cp_st…