CVE-2015-7801 describes a use-after-free vulnerability in OptiPNG 0.6.4, affecting various OptiPNG and Ubuntu Linux distributions. This high-severity flaw (CVSS 8.8) allows remote attackers to execute arbitrary code by tricking a user into processing a specially crafted PNG file, leading to potential complete compromise of confidentiality, integrity, and availability. Despite its high risk, there is no public exploit intelligence available, nor is it listed in CISA's KEV catalog. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.6.4CPE matchmatch criteria | cpe:2.3:a:optipng_project:optipng:*:*:*:*:*:*:*:* | ||
12.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* | ||
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | ||
15.10CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.