{"action":"Upgrade optipng to 0.6.1.1-1 or later.","affected":[{"fixed":"0.6.1.1-1","introduced":"0"}],"component":"optipng","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.6.1.1-1"],"id":"tcs_01M5N952S201P3WQJTZ0PDJ48C","modified_at":"2026-10-23T17:47:48.703805023Z","published_at":"2008-11-17T18:18:47.967Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-5101","https://security-tracker.debian.org/tracker/CVE-2008-5101"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-5101","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-5101"}],"summary":"Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an \"array overflow.\""}