Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.068
EPSS Ranking 90.8%