CVE-2017-6191by Jeremyin Security Bulletinson Posted on March 28, 2017 Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.