libpng: LIBPNG buffer overflow

🗓️ 07 Apr 2026 06:21:37Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Libpng buffer overflow from out-of-bounds read during palette image processing with an optimize-alpha flag.

Reporter	Title	Published	Views	Family All 382
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DataStage on Cloud Pak for Data	25 Feb 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability has addressed Multiple Vulnerabilities within Instana Agent container image	3 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2026.	27 Mar 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow (traditional and containers) March 2026	27 Mar 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	9 Jul 202622:44	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities in LIBPNG affects IBM Netezza Appliance	15 Apr 202611:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libpng affects IBM Netezza Appliance	22 Apr 202612:14	–	ibm
GithubExploit	Exploit for CVE-2025-64720	25 Nov 202510:19	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Libpng	22 Jan 202611:35	–	githubexploit

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Hardened Images	any	aarch64	libpng	1.6.56-1.hum1	libpng-1.6.56-1.hum1.aarch64.rpm
Red Hat Hardened Images	any	x86_64	libpng	1.6.56-1.hum1	libpng-1.6.56-1.hum1.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-64720
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643
github	www.github.com/pnggroup/libpng/issues/686
github	www.github.com/pnggroup/libpng/pull/751
github	www.github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64720
cve	www.cve.org/CVERecord

19 Jul 2026 02:11Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.1

EPSS0.0036

SSVC

libpng buffer overflow out-of-bounds read palette images optimize alpha premultiplication background compositing