Memory Leak in png_create_info_struct in libpng 1.6.36

Memory Leak in png_create_info_struct in libpng 1.6.36

CVE-2019-6129 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.

Learn more about our Cis Benchmark Audit For Google Cloud Computing Platform.