High severity7.8NVD Advisory· Published Oct 1, 2023· Updated Jun 17, 2026
CVE-2023-43907
CVE-2023-43907
Description
OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:optipng_project:optipng:0.7.7:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:optipng_project:optipng:0.7.7:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =0.7.7
- osv-coords3 versionspkg:rpm/opensuse/optipng&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/optipng&distro=openSUSE%20Tumbleweedpkg:rpm/suse/optipng&distro=SUSE%20Package%20Hub%2015%20SP4
< 0.7.8-bp154.3.5.1+ 2 more
- (no CPE)range: < 0.7.8-bp154.3.5.1
- (no CPE)range: < 0.7.8-1.1
- (no CPE)range: < 0.7.8-bp154.3.5.1
Patches
Vulnerability mechanics
References
6- github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.mdnvdExploitThird Party Advisory
- optipng.sourceforge.netnvdProduct
- sourceforge.net/projects/optipng/files/OptiPNG/optipng-0.7.7/optipng-0.7.7.tar.gz/downloadnvdProduct
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5/nvd
News mentions
0No linked articles in our index yet.