Pngquant is a specialized image-processing utility focused on PNG color quantization and optimization, with a narrow product scope centered on the pngquant tool itself. The observed weakness class clusters around integer overflow and wraparound conditions, reflecting the arithmetic complexity inherent in image data parsing and palette manipulation. Current vulnerability counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Pngquant over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-5735HIGH Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a | May 23, 2017 | 7.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Pngquant.
Media articles that mention a CVE ID that affects a product developed by Pngquant — matched by CVE ID, not by vendor name.