4054 matches found
LibPNG_OSS-Fuzz
Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...
CVE-2010-1205
Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...
CVE-2025-64720-PoC
CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplication Status : Patched Severity : High CVE ID : CVE-2025-64720 Discovery Date : 2025-11-XX Public Disclosure : 2025-11-21 Overview Summary An out-of-bounds read vulnerability exists in libpng's pngimagereadcomposite function when...
CVE-2025-65018_Exploit_Challenge
CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-
Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...
CLSA-2026-1792993907 libpng: Fix of 3 CVEs
CVE-2016-10087: fix NULL pointer dereference in pngsettext2 - CVE-2026-25646: fix heap buffer overflow in pngsetdither - CVE-2026-33416: fix use-after-free on pngptr palette and trans buffers...
Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261653 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2026-22801, CVE-2007-2445, CVE-2007-5269,...
CLSA-2026-1785774324 libpng: Fix of 2 CVEs
CVE-2025-64506: fix heap buffer over-read in pngwriteimage8bit when 8-bit input is written with the convertto8bit flag set...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libpng: libpng-1.6.59-0.1.hum1 aarch64, s390x, x8664 libpng-devel-1.6.59-0.1.hum1 aarch64, s390x, x8664 libpng-static-1.6.59-0.1.hum1 aarch64, s390x, x8664 libpng-tools-1.6.59-0.1.hum1 aarch64,...
libpng: libpng: Use-after-free in sequential reader when png_read_end called without reading image rows
A flaw was found in libpng. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by supplying a specially crafted PNG image. Incomplete decompression of certain metadata chunks can leave a dangling pointer in the library's internal decompression state. When an...
CVE-2026-46675
A flaw was found in libpng. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by supplying a specially crafted PNG image. Incomplete decompression of certain metadata chunks can leave a dangling pointer in the library's internal decompression state. When an...
Astra Linux – Vulnerability in libpng1.6
LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, there was a heap buffer over-read vulnerability in the libpng’s pngdoquantize function when processing PNG files with malformed palette...
SUSE CVE-2026-109260
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libpng vulnerabilities (USN-8639-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8639-1 advisory. Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libpng vulnerability (USN-8899-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8899-1 advisory. Ze Sheng discovered that libpng incorrectly handled certain compressed data chunks in PNG files. An...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...