ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- 用 Poc 使用方法: 1-シェアボタンを押してスクリーンショットを撮ります 2-ftp で次のパスに移動します: /user/avcontents/photo/NPXS20001/NPXS20001/XXX/ そこに撮影したスクリーンショットがあります。 3-それをPCにコピーし、makepng.py で実行すると、poc.png が出力されます。 4-それをスクリーンショットの名前にリネームし、ftp で同じパスに置き換えます。...

LibPNG_OSS-Fuzz

libpng 的模糊测试与漏洞分析 小组安全研究项目 关于模糊测试： 模糊测试是一种自动化软件测试技术，向程序提供无效、意外或随机数据，以发现缺陷和漏洞。导向覆盖的模糊测试利用代码覆盖反馈，智能地探索不同的执行路径。 关于 OSS-Fuzz： OSS-Fuzz 是 Google 针对开源软件的持续模糊测试服务。它使用 LibFuzzer 及其他模糊测试引擎，自动测试关键开源项目并报告漏洞。 本项目演示了使用 Google 的 OSS-Fuzz 框架对 libpng 库进行导向覆盖的模糊测试、代码覆盖分析及漏洞利用。 目标： libpng v1.6.48（模糊测试）、v1.5.20（漏洞利...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF 도전 과제: "PNG 패닉" 이 도전 과제는 libpng의 실제 버퍼 오버플로우 취약점특히 16비트 인터레이스 이미지 처리 시 간소화된 API pngimagefinishread와 관련된을 기반으로 합니다. 🚩 도전 목표 취약한 바이너리 victim이 제공됩니다. 이 바이너리는 정적으로 링크된 취약한 버전의 libpng를 사용합니다. 애플리케이션은 exploit.png라는 PNG 파일을 버퍼로 읽어들입니다. 목표는 힙 오버플로우를 트리거하여 이미지 버퍼 바로 뒤에 위치한 Logger 구조체의 함...

CVE-2025-64720-PoC

CVE-2025-64720: libpng パレット事前乗算におけるバッファオーバーフロー ステータス : パッチ適用済み 深刻度 : 高 CVE ID : CVE-2025-64720 発見日 : 2025-11-XX 公開日 : 2025-11-21 概要 要約 libpng の pngimagereadcomposite 関数に、PNGFLAGOPTIMIZEALPHA が有効なパレット画像を処理する際に、範囲外読み取りの脆弱性が存在します。pnginitreadtransformations 内のパレット合成コードは、事前乗算中に背景合成を誤って適用し、簡易 PNG API...

CVE-2010-1205

libpng =1.4.2 の脆弱性 CVE-2010-1205 を利用したサンプルエクスプロイト gregbook - libpng ソースに付属するサンプルプログラム群 generate - libpng で読み込む際にヒープオーバーフローを引き起こす悪意のある PNG ファイルを生成 再現手順: ./build.sh すべてのライブラリと実行ファイルをビルド。gregbook/rpng2-x は libpng-1.4.2 バグあり にリンクされる ./generate/build/generate xploit.png（不正な形式の PNG ファイル）を生成 cd gregbook...

NewStart CGSL MAIN 7.02 : libpng Multiple Vulnerabilities (NS-SA-2026-0100)

The remote NewStart CGSL host, running version MAIN 7.02, has libpng packages installed that are affected by multiple vulnerabilities: - A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function dopnm2png of the file contrib/pngminus/pnm2png.c of the...

Alibaba Cloud Linux 3 : 0277: cups-filters (ALINUX3-SA-2026:0277)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0277 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-64612: A flaw was found in libcupsfilters...

ASB-A-496616027

In pngdoexpandpalettergba8neon of paletteneonintrinsics.c, there is a possible out of bounds read and write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-40930

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. In version 1.8.0, a remote attacker could provide a specially crafted APNG Animated Portable Network Graphics file. This flaw allows attacker-controlled data within an ignored chunk to be...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)

The version of AOS installed on the remote host is prior to 7.3.1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.16 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093149 advisory. The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093190 advisory. Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093170 advisory. The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093158 advisory. The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)

The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.26 to 1.6.53, there was an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit, which caused...

Astra Linux – Vulnerability in libpng1.6

A issue has been identified in third-party PNM decoding related to libpng 1.6.35. It is a stack-based buffer overflow in the gettoken function located in the pnm2png.c file within pnm2png...

K000163052: libpng vulnerability CVE-2026-33416

Security Advisory Description LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo,...