CVE-2021-4214: Out-of-bounds Write

August 24, 2022 (updated November 8, 2022)

A heap overflow flaw was found in libpngs’ pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.

References

access.redhat.com/security/cve/CVE-2021-4214
bugzilla.redhat.com/show_bug.cgi?id=2043393
github.com/glennrp/libpng/issues/302
nvd.nist.gov/vuln/detail/CVE-2021-4214
security-tracker.debian.org/tracker/CVE-2021-4214

Code Behaviors & Features

Detect and mitigate CVE-2021-4214 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →