{"id":"CVE-2023-43907","aliases":["ALPINE-CVE-2023-43907","AZL-36971","AZL-37153","DEBIAN-CVE-2023-43907","EUVD-2023-48267","GHSA-xwf2-9m25-2hpf","MGASA-2023-0333","OESA-2023-1873","UBUNTU-CVE-2023-43907","openSUSE-SU-2023:0388-1","openSUSE-SU-2024:13415-1"],"status":"published","title":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at...","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00455,"percentile":0.39753,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-10-01T00:00:00Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"optipng","fixed_in":["0.7.8-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"optipng","fixed_in":["0.7.8-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"optipng","fixed_in":["0.7.8+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"optipng","fixed_in":["0.7.8+ds-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"optipng","fixed_in":["0.7.8-2.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"optipng","fixed_in":["0.7.8-2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"optipng","fixed_in":["0.7.8-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"optipng","fixed_in":["0.7.8-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"optipng","fixed_in":["0.7.8-1.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"optipng","fixed_in":["0.7.8-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"optipng","fixed_in":["0.7.8-1.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP4","package":"optipng","fixed_in":["0.7.8-bp154.3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"optipng","fixed_in":["0.7.8-bp154.3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"optipng","fixed_in":["0.7.8-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.7.7-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.7-2","0.7.7-3","0.7.8+ds-1","7.9.1+ds-1","7.9.1+ds-2"]},{"source":"osv","ecosystem":"Debian:13","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8+ds-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-2.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.5-1","0.7.6-1","0.7.6-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.6-1build1","0.7.6-1ubuntu1","0.7.6-1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.7-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.7-1build1","0.7.7-2","0.7.7-2build1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-bp154.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-bp154.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"optipng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.1"}]}]}],"products":[{"vendor":"optipng_project","product":"optipng"}],"references":[{"url":"http://optipng.sourceforge.net/","tags":["x_transferred","Product","web","report"]},{"url":"https://sourceforge.net/projects/optipng/files/OptiPNG/optipng-0.7.7/optipng-0.7.7.tar.gz/download?use_mirror=udomain\u0026download=","tags":["x_transferred","Product","web","report"]},{"url":"https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.md","tags":["x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43907","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5"},{"url":"http://optipng.sourceforge.net"},{"url":"https://github.com/advisories/GHSA-xwf2-9m25-2hpf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-43907","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-43907","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0333.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32520","tags":["report"]},{"url":"https://sourceforge.net/p/optipng/bugs/87/","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1873","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-43907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43907","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M4KHRFT5CJKRYROUB7T7FZQUZAVRJESF/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215937","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43907","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T00:00:00Z","modified":"2024-09-23T16:45:51.701Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-48267","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T00:00:00Z","modified":"2024-09-23T16:45:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:16.94122Z"}],"ghsa":[{"id":"GHSA-xwf2-9m25-2hpf","title":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at...","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T03:30:18Z","modified":"2024-09-23T18:31:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:58:19.257617Z"}],"nvd":[{"id":"CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24.947Z","modified":"2026-06-17T06:26:40.44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:35.022405Z"}],"osv":[{"id":"ALPINE-CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24.947Z","modified":"2026-11-03T06:32:59.409677471Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"AZL-36971","title":"CVE-2023-43907 affecting package optipng for versions less than 0.7.8-5","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24Z","modified":"2026-04-21T04:32:25.692801Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-37153","title":"CVE-2023-43907 affecting package optipng 0.7.7-7","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24Z","modified":"2026-04-21T04:28:14.136618Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24.947Z","modified":"2026-04-16T04:39:41.046971984Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DEBIAN-CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:24.947Z","modified":"2026-10-26T18:02:49.808860194Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2023-1873","title":"optipng security update","description":"OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats (BMP, GIF, PNM and TIFF) to optimized PNG, and performs PNG integrity checks and corrections.\r\n\r\nSecurity Fix(es):\r\n\r\nOptiPNG v0.7.7 was discovered to contain a global buffer overflow via the \u0026apos;buffer\u0026apos; variable at gifread.c.(CVE-2023-43907)","status":"published","published":"2023-12-01T11:06:19Z","modified":"2026-08-18T01:18:05.254489001Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2023-43907","description":"OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.","status":"published","published":"2023-10-01T01:15:00Z","modified":"2025-10-24T05:02:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"MGASA-2023-0333","title":"Updated optipng packages fix a security vulnerability","description":"Updated the optipng package to fix a security vulnerability\n(CVE-2023-43907) and other bugs. The GIF handler was vulnerable to a\nglobal buffer overflow.\n","status":"published","published":"2023-12-01T11:54:47Z","modified":"2026-04-16T04:44:03.570444138Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2023:0388-1","title":"Security update for optipng","description":"This update for optipng fixes the following issues:\n\nUpdate to 0.7.8:\n\n* CVE-2023-43907: Fixed a global-buffer-overflow vulnerability in the GIF reader (boo#1215937).\n* Fixed a stack-print-after-scope defect in the error handler.\n* Fixed an assertion failure in the image reduction module.\n* Fixed the command-line wildargs expansion in the Windows port.\n* Refactored the structured exception handling.\n","status":"published","published":"2023-12-02T17:00:59Z","modified":"2025-05-07T18:15:12.61516Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13415-1","title":"optipng-0.7.8-1.1 on GA media","description":"These are all security issues fixed in the optipng-0.7.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:54:08.261943Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}