https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-43907.htmlhttps://patchthecve.com/cve/CVE-2023-43907.htmlWed, 17 Jun 2026 06:26:40 +0000HIGH 7.8: OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.https://patchthecve.com/cve/CVE-2017-16938.htmlhttps://patchthecve.com/cve/CVE-2017-16938.htmlWed, 17 Jun 2026 01:10:10 +0000HIGH 7.8: A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.https://patchthecve.com/cve/CVE-2017-1000229.htmlhttps://patchthecve.com/cve/CVE-2017-1000229.htmlWed, 17 Jun 2026 00:58:56 +0000HIGH 7.8: Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.https://patchthecve.com/cve/CVE-2015-7802.htmlhttps://patchthecve.com/cve/CVE-2015-7802.htmlWed, 17 Jun 2026 00:33:09 +0000MEDIUM 5.5: gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file.https://patchthecve.com/cve/CVE-2015-7801.htmlhttps://patchthecve.com/cve/CVE-2015-7801.htmlWed, 17 Jun 2026 00:33:09 +0000HIGH 8.8: Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.https://patchthecve.com/cve/CVE-2016-3982.htmlhttps://patchthecve.com/cve/CVE-2016-3982.htmlWed, 17 Jun 2026 00:46:40 +0000HIGH 8.8: Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow.https://patchthecve.com/cve/CVE-2016-3981.htmlhttps://patchthecve.com/cve/CVE-2016-3981.htmlWed, 17 Jun 2026 00:46:40 +0000HIGH 7.8: Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.https://patchthecve.com/cve/CVE-2016-2191.htmlhttps://patchthecve.com/cve/CVE-2016-2191.htmlWed, 17 Jun 2026 00:43:38 +0000MEDIUM 6.5: The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.https://patchthecve.com/cve/CVE-2012-4432.htmlhttps://patchthecve.com/cve/CVE-2012-4432.htmlTue, 16 Jun 2026 23:45:00 +0000HIGH 7.5: Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction."