CVE-2016-5735
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-5735
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5735.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-5735
- Downstream
- Related
- Published
- 2017-05-23T04:29:01Z
- Modified
- 2025-11-12T14:51:40.590386Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Integer overflow in the rwpngreadimage24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
- References
Affected packages
Git / github.com/kornelski/pngquant
Affected ranges
- Type
- GIT
- Repo
- https://github.com/kornelski/pngquant
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
1.*
1.2a
1.2b
1.3a
1.3b
1.4.1
1.4.2
1.4b
1.5.0
1.5.1
1.5.1a1
1.6
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
2.*
2.0.0
2.0.1
2.0.2
2.1.0
2.2.0
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.4.0
2.4.0.1
2.4.1
2.5.0
2.5.1
2.5.2
2.6.0
2.7.0
2.7.1
Database specific
vanir_signatures
[
{
"signature_version": "v1",
"source": "https://github.com/kornelski/pngquant/commit/b7c217680cda02dddced245d237ebe8c383be285",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11749072273354818079652599568515810704",
"295321760208783322335535339872887592277",
"263241181405925274193218127026934768670",
"279570523230507015572632992992007345031",
"61102045982274863775149249678886770771",
"101195728603932320435831620322596778343",
"185264035726705698568741517661172567482",
"323461216799807688237550986647038251466",
"59479731129094185246169890485511112403",
"3248771318875236472868746566677569443"
]
},
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "rwpng.c"
},
"id": "CVE-2016-5735-90d441ae"
},
{
"signature_version": "v1",
"source": "https://github.com/kornelski/pngquant/commit/b7c217680cda02dddced245d237ebe8c383be285",
"digest": {
"length": 4485.0,
"function_hash": "219203256382287797673606922366190072575"
},
"signature_type": "Function",
"deprecated": false,
"target": {
"function": "rwpng_read_image24_libpng",
"file": "rwpng.c"
},
"id": "CVE-2016-5735-9ffba8c0"
}
]