CVE-2015-7802

MEDIUM

OptiPNG <0.7.6 - DoS

Title source: llm

Description

gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file.

References (3)

[Vendor Advisory] http://optipng.sourceforge.net/history.txt

[Vendor Advisory] http://www.ubuntu.com/usn/USN-2951-1

[Product] https://sourceforge.net/p/optipng/bugs/53/

Scores

CVSS v3 5.5

EPSS 0.0042

EPSS Percentile 61.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-119

Status draft

Affected Products (4)

optipng_project/optipng

canonical/ubuntu_linux

Timeline

Published Apr 20, 2016

Tracked Since Feb 18, 2026