Advisories · Technology
pnggroup libpng.
Every CVE that names pnggroup libpng among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body
- pnggroup libpng
- pnggroup libpng-apng
- CWE-436
- CVSS 5.1 Medium
LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure
- pnggroup libpng
- Memory corruption
- CVSS 7.6 High
LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
- pnggroup libpng
- Memory corruption
- CVSS 7.5 High
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
- pnggroup libpng
- Memory corruption
- CVSS 4.8 Medium
pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow
- pnggroup libpng
- Memory corruption
- CVSS 8.3 High
LIBPNG has a heap buffer overflow in png_set_quantize
- pnggroup libpng
- Memory corruption
- CWE-126
- CVSS 6.8 Medium
LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
- pnggroup libpng
- Memory corruption
- CVSS 6.1 Medium
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
- pnggroup libpng
- Memory corruption
- CVSS 7.1 High
LIBPNG has an out-of-bounds read in png_image_read_composite
- pnggroup libpng
- Memory corruption
- CVSS 7.1 High
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
- pnggroup libpng
- Memory corruption
- CVSS 7.1 High
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
- pnggroup libpng
- Memory corruption
- CVSS 6.1 Medium
LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
- pnggroup libpng
- Memory corruption
- CVSS 6.1 Medium
LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
- pnggroup libpng
- Memory corruption