Gentoo Linux Security Advisory GLSA 200604-10 – Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with more than 3 output components, such as images using the YCCK or CMYK colour space. When xzgv or zgv attempt to render the image, data from the image overruns a heap allocated buffer. Versions less than 0.8-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45776/glsa-200604-10.txt
Source: https://packetstormsecurity.com/files/45776/Gentoo-Linux-Security-Advisory-200604-10.html