optipng:
2016-07-01

A vulnerability was discovered that allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

CVE-2016-2191
optipng-0.7.6.tgz