CVE-2017-7231

pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file.

• CWE-119

• http://www.securityfocus.com/bid/97037Third Party Advisory, VDB Entry
• https://github.com/Tatsh/pngdefry/issues/1Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/97037Third Party Advisory, VDB Entry
• https://github.com/Tatsh/pngdefry/issues/1Exploit, Third Party Advisory

Published

Mar 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7225The find_nearest_line function in addr2line in GNU Binutils …
• CVE-2017-7226The pe_ILF_object_p function in the Binary File Descriptor (…
• CVE-2017-7227GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap…
• CVE-2017-7228An issue (known as XSA-212) was discovered in Xen, with fixe…
• CVE-2017-7229PGP/MIME encrypted messages injected into a Vaultive O365 (b…
• CVE-2017-7230A buffer overflow vulnerability in Disk Sorter Enterprise 9.…
• CVE-2017-7233Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before…
• CVE-2017-7234A maliciously crafted URL to a Django (1.10 before 1.10.7, 1…
• CVE-2017-7235An issue was discovered in cloudflare-scrape 1.6.6 through 1…
• CVE-2017-7236SQL injection vulnerability in NetApp OnCommand Unified Mana…
• CVE-2017-7237The Spiceworks TFTP Server, as distributed with Spiceworks I…
• CVE-2017-7239Ninka before 1.3.2 might allow remote attackers to obtain se…