{"action":"Upgrade libpng to 1.6.37 or later.","affected":[{"fixed":"1.6.37","introduced":"0"}],"component":"libpng","cve_ids":["CVE-2018-14550"],"ecosystem":"NuGet","epss":0.03541,"exploited":false,"fixed_versions":["1.6.37"],"ghsa_id":"GHSA-qwwr-qc2p-6283","id":"tcs_01M5N8Z7Q9XEG3YTW2H5XKRP0D","modified_at":"2024-02-22T05:22:08.291933Z","published_at":"2021-03-22T16:57:07Z","references":["https://osv.dev/vulnerability/GHSA-qwwr-qc2p-6283","https://nvd.nist.gov/vuln/detail/CVE-2018-14550","https://github.com/glennrp/libpng/issues/246","https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token","https://github.com/glennrp/libpng","https://security.gentoo.org/glsa/201908-02","https://security.netapp.com/advisory/ntap-20221028-0001","https://snyk.io/vuln/SNYK-UPSTREAM-LIBPNG-1043612","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-qwwr-qc2p-6283","url":"https://osv.dev/vulnerability/GHSA-qwwr-qc2p-6283"}],"summary":"Out-of-bounds write in libpng"}