png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < de5857fa7bcc9a496a914c7e21390be873109f26 |
| n/a | n/a | <= 6.6.* |