2017-01-09

A null-pointer-dereference bug was fixed in png_set_text_2() when an image-editing application adds, removes, and re-adds text chunks to a PNG image. This bug does not affect pure viewers, nor are there any known editors that could trigger it without interactive user input.

CVE-2016-10087
png-1.6.27.tgz