Eye of GNOME (eog) contains a heap-based buffer overflow vulnerability in its PNG metadata reader caused by improper state handling when parsing split metadata chunks. This flaw can be triggered when a user opens a specially crafted PNG file, potentially causing a denial of service via application crash. The vulnerability has a medium severity rating with a CVSS score of 5.5. A fixed version 44.3-2.oe2403sp4 is available to address this issue.