Exploiting aCropalypse: Recovering Truncated PNGs

from blog David Buchanan's Blog, | ↗ original
By David Buchanan, 18th March 2023 This article assumes you’ve already heard about the aCropalypse vulnerability, aka CVE-2023-21036. If not, go read about it here (oops, this page doesn't exist yet. Read this tweet in the meantime). For me, it all started with the following...