Libmng
Monthly
Heap-based buffer overflow in libmng through 2.0.3 allows a crafted MNG file containing MHDR, DHDR, and a multi-record ORDR chunk to overwrite heap memory when an application calls mng_read or mng_readdisplay, producing attacker-controlled out-of-bounds writes and likely application crashes. The attack is local/file-based and requires the victim to open or process the malicious MNG (UI:P), with no confidentiality impact and limited integrity impact but high availability impact. Publicly available exploit code exists; no confirmed active exploitation (CISA KEV) is indicated in the supplied data.
Heap-based buffer overflow in libmng through 2.0.3 allows a crafted MNG file containing MHDR, DHDR, and a multi-record ORDR chunk to overwrite heap memory when an application calls mng_read or mng_readdisplay, producing attacker-controlled out-of-bounds writes and likely application crashes. The attack is local/file-based and requires the victim to open or process the malicious MNG (UI:P), with no confidentiality impact and limited integrity impact but high availability impact. Publicly available exploit code exists; no confirmed active exploitation (CISA KEV) is indicated in the supplied data.