Lvandeve vulnerabilities
Published CVEs affecting Lvandeve products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-112020
Medium · 6.1
CWE-125 Oct 18, 2026
LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent heap memory or crash applications.