CVE-2015-7700

CRITICAL

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

Published: Aug 31, 2017 Modified: Jun 17, 2026

CWE-415

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor	Product	Version
pngcrush_project	pngcrush	*

GitHub Security Advisory GHSA-4q9g-gjc2-2pf4

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows...

References (4)

http://pmt.sourceforge.net/pngcrush/changelog.html Broken Link
https://sourceforge.net/p/pmt/news/2015/10/pngcrush-1787-released/ Release Notes
http://pmt.sourceforge.net/pngcrush/changelog.html Broken Link
https://sourceforge.net/p/pmt/news/2015/10/pngcrush-1787-released/ Release Notes

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 2.19%

Top 19% most likely to be exploited

Threat Score 39.9 / 100

Data Sources

NVD EPSS GitHub