CVE-2017-6962

apng2gif: An issue was discovered in apng2gif 1.7

CVE-2017-6962 is fixed in apng2gif on 1 platform, first by apng2gif 1.8-0.1, released March 17, 2017. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0130
70th percentile

An issue was discovered in apng2gif 1.7. There is an integer overflowresulting in a heap-based buffer overflow. This is related to theread_chunk function making an unchecked addition of 12.

Where it's fixed

ProductFixed inFixReleased
Linux
apng2gif · Ubuntu 20.04 LTS (focal) 1.8-0.1 apng2gif 1.8-0.1 Mar 17, 2017
apng2gif · Ubuntu 24.10 (oracular) 1.8-0.1 apng2gif 1.8-0.1 Jan 16, 2026
apng2gif · Ubuntu 25.04 (plucky) 1.8-0.1 apng2gif 1.8-0.1 Jan 16, 2026