CVE Intelligence

Lvandeve Lodepng vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Lvandeve Lodepng: 1 record(s), with affected versions and fixes.

CVE-2026-112020 Medium · 6.1 CWE-125 Oct 18, 2026
LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent heap memory or crash applications.