https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-41443.htmlhttps://patchthecve.com/cve/CVE-2024-41443.htmlWed, 17 Jun 2026 07:47:43 +0000MEDIUM 5.5: A stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.https://patchthecve.com/cve/CVE-2024-41440.htmlhttps://patchthecve.com/cve/CVE-2024-41440.htmlWed, 17 Jun 2026 07:47:43 +0000MEDIUM 6.2: A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.https://patchthecve.com/cve/CVE-2024-41439.htmlhttps://patchthecve.com/cve/CVE-2024-41439.htmlWed, 17 Jun 2026 07:47:42 +0000MEDIUM 5.5: A heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.https://patchthecve.com/cve/CVE-2024-41438.htmlhttps://patchthecve.com/cve/CVE-2024-41438.htmlWed, 17 Jun 2026 07:47:42 +0000MEDIUM 6.2: A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.https://patchthecve.com/cve/CVE-2024-41437.htmlhttps://patchthecve.com/cve/CVE-2024-41437.htmlWed, 17 Jun 2026 07:47:42 +0000MEDIUM 5.5: A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafted PNG file.