optipng records
3 published records for vendor optipng.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-399 Resource Management Errors1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2008-5101No exploit | Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image,optipng · optipng · CWE-119 | Critical9.3 | — | 3.9% | Nov 17, 2008 |
32Monitor | CVE-2012-4432No exploit | Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via optipng · optipng · CWE-399 | High7.5 | — | 5.2% | Sep 30, 2012 |
27Monitor | CVE-2016-2191No exploit | The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memooptipng · optipng · CWE-119 | Medium6.5 | — | 3.5% | Apr 13, 2016 |
- CVE-2008-510138Monitor
Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image,
CriticalCVSS 9.3No exploitEPSS 3%optipng · optipngNov 17, 2008
- CVE-2012-443232Monitor
Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via
HighCVSS 7.5No exploitEPSS 5%optipng · optipngSep 30, 2012
- CVE-2016-219127Monitor
The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memo
MediumCVSS 6.5No exploitEPSS 3%optipng · optipngApr 13, 2016