CVE-2021-44335

HIGH

ok-file-formats - Heap-Based Buffer Overflow in ok_png_transform_scanline

Title source: llm

Description

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_png_transform_scanline() in "/ok_png.c:533".

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/brackeen/ok-file-formats/issues/17

Scores

CVSS v3 7.8

EPSS 0.0072

EPSS Percentile 49.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

ok-file-formats_project/ok-file-formats 2021-06-05

Published Mar 03, 2022

Tracked Since Feb 18, 2026