CVE-2026-22695

CVE-2026-22695 affects libpng 1.6.51–1.6.53 with a heap buffer over-read in the simplified API png_image_finish_read when processing interlaced 16‑bit PNGs with 8‑bit output and non-minimal row stride; this is a regression introduced by the fix for CVE-2025‑65018. The issue is fixed in libpng 1.6...

CVE-2026-22695

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function pngimagefinishread when processing interlaced 16-bit PNGs with...

CVE-2026-22695

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function pngimagefinishread when processing interlaced 16-bit PNGs with...

CVE-2026-22695 LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function pngimagefinishread when processing interlaced 16-bit PNGs with...

Security update for util-linux

This update for util-linux fixes the following issues: CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. lscpu: Add support for NVIDIA Olympus arm64 core jscPED-13682. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:0115-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - lscpu: Add support for NVIDIA Olympus arm64 core jscPED-13682...

SUSE-SU-2026:20073-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

SUSE-SU-2026:20030-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

OPENSUSE-SU-2026:20017-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

libpng 输入验证错误漏洞

libpng is The PNG Development Group open source a PNG graphics file can be realized on the creation of PNG, read and write operations such as PNG reference library . An input validation error vulnerability exists in libpng versions 1.6.26 through 1.6.53, which stems from an integer truncation in...

PT-2026-2325

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.26 through 1.6.53 Description libpng is a library used by applications to read, create, and manipulate PNG image files. A flaw exists in the png write image 16bit and png write image 8bit functions due to an integer...

SUSE SLED15 / SLES15 Security Update : libheif (SUSE-SU-2026:0087-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0087-1 advisory. - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay...

Security update for libheif

This update for libheif fixes the following issues: CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:0087-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735...

CVE-2025-15382

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

CVE-2025-15382

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

CVE-2025-15382 Client SCP Request Triggers Buffer Overread by 1 Byte

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

CVE-2025-15382

The CVE-2025-15382 issue concerns wolfSSH_CleanPath() in wolfSSH. A heap buffer over-read is triggered by authenticated remote SCP path input containing '/./' sequences, leading to a one-byte heap over-read. Multiple sources (NVD, Red Hat, OSV, CVE listing) describe the vulnerability consistently...

CVE-2025-15382 Client SCP Request Triggers Buffer Overread by 1 Byte

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

PT-2026-1498

Name of the Vulnerable Software and Affected Versions wolfSSH affected versions not specified Description A heap buffer over-read issue exists in the wolfSSH CleanPath function within wolfSSH. A remote attacker with authentication can trigger this by providing specially crafted SCP path input tha...