medium5.5
CVE-2022-36752
png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p.
Impact
png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Png2webp Project | Png2webp | Version 1.0.4 |