Medium severity5.5NVD Advisory· Published Nov 12, 2017· Updated May 13, 2026
CVE-2017-16794
CVE-2017-16794
Description
The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/matthiaskramm/swftools/issues/50nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.