CVE-2019-14373

2019-07-2819:15:11

Google

osv.dev

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

38.9%

JSON

An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file.

References

github.com/FLIF-hub/FLIF/issues/541