agentprime: pnggroup-libpngEvery new CVE for pnggroup-libpng.https://agentprime.io/CVE-2026-40930: LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk bodyhttps://agentprime.io/advisories/CVE-2026-40930/https://agentprime.io/advisories/CVE-2026-40930/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 14:34:51 GMTCVECVE-2026-34757: LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosurehttps://agentprime.io/advisories/CVE-2026-34757/https://agentprime.io/advisories/CVE-2026-34757/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 14:41:18 GMTCVECVE-2026-33636: LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64https://agentprime.io/advisories/CVE-2026-33636/https://agentprime.io/advisories/CVE-2026-33636/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:51:58 GMTCVECVE-2026-33416: LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`https://agentprime.io/advisories/CVE-2026-33416/https://agentprime.io/advisories/CVE-2026-33416/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:48:54 GMTCVECVE-2026-3713: pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflowhttps://agentprime.io/advisories/CVE-2026-3713/https://agentprime.io/advisories/CVE-2026-3713/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 08 Mar 2026 06:02:11 GMTCVECVE-2026-25646: LIBPNG has a heap buffer overflow in png_set_quantizehttps://agentprime.io/advisories/CVE-2026-25646/https://agentprime.io/advisories/CVE-2026-25646/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 17:04:38 GMTCVECVE-2026-22801: LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*https://agentprime.io/advisories/CVE-2026-22801/https://agentprime.io/advisories/CVE-2026-22801/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jan 2026 22:57:58 GMTCVECVE-2026-22695: LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)https://agentprime.io/advisories/CVE-2026-22695/https://agentprime.io/advisories/CVE-2026-22695/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jan 2026 22:55:40 GMTCVECVE-2025-66293: LIBPNG has an out-of-bounds read in png_image_read_compositehttps://agentprime.io/advisories/CVE-2025-66293/https://agentprime.io/advisories/CVE-2025-66293/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 20:33:57 GMTCVECVE-2025-65018: LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`https://agentprime.io/advisories/CVE-2025-65018/https://agentprime.io/advisories/CVE-2025-65018/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Nov 2025 23:50:18 GMTCVECVE-2025-64720: LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplicationhttps://agentprime.io/advisories/CVE-2025-64720/https://agentprime.io/advisories/CVE-2025-64720/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Nov 2025 23:45:38 GMTCVECVE-2025-64506: LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA imageshttps://agentprime.io/advisories/CVE-2025-64506/https://agentprime.io/advisories/CVE-2025-64506/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Nov 2025 23:41:09 GMTCVECVE-2025-64505: LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette indexhttps://agentprime.io/advisories/CVE-2025-64505/https://agentprime.io/advisories/CVE-2025-64505/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Nov 2025 23:38:40 GMTCVE