See how libmng compares to other vendors in security performance
libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a multi-record ORDR chunk to applications calling mngread or mngreaddisplay, writing attacker-controlled data past the allocation and crashing the application.