Launchpad.net

CVE 2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

See the CVE page on Mitre.org for more details.