Libpng versions 1.0.6 through 1.2.12 can crash while decoding the sPLT chunk. This is due to an incorrect calculation of the buffer size for storing the palette entries. ok steven@
Libpng versions 1.0.6 through 1.2.12 can crash while decoding the sPLT chunk. This is due to an incorrect calculation of the buffer size for storing the palette entries. ok steven@