CVEs-PoC/2016/CVE-2016-2191.md

CVE-2016-2191

Description

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

POC

Reference

• http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html
• http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html

Github

No PoCs found on GitHub currently.