CVE-2017-6961
apng2gif: An issue was discovered in apng2gif 1.7
CVE-2017-6961 is fixed in apng2gif on 1 platform, first by apng2gif 1.8-0.1, released March 17, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0080
56th percentile
An issue was discovered in apng2gif 1.7. There is improper sanitization ofuser input causing huge memory allocations, resulting in a crash. This isrelated to the read_chunk function using the pChunk->size value (within thePNG file) to determine the amount of memory to allocate.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| apng2gif · Ubuntu 20.04 LTS (focal) | 1.8-0.1 | apng2gif 1.8-0.1 | Mar 17, 2017 |
| apng2gif · Ubuntu 24.10 (oracular) | 1.8-0.1 | apng2gif 1.8-0.1 | Jan 16, 2026 |
| apng2gif · Ubuntu 25.04 (plucky) | 1.8-0.1 | apng2gif 1.8-0.1 | Jan 16, 2026 |