CVE-2018-14047

5.5 mediumEPSS 0.9%

An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NOT use this in sensitive environments, especially DO NOT read PNGs from unknown sources with it!" statement in the master/README.md file

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-07-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pngwriter_project:pngwriter

References

https://github.com/fouzhe/security/tree/master/pngwriter
https://github.com/pngwriter/pngwriter/issues/129
https://github.com/fouzhe/security/tree/master/pngwriter
https://github.com/pngwriter/pngwriter/issues/129

Check your stack JSON