PT-2025-48996

Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.6.52 Description LIBPNG is a library used for reading, creating, and manipulating PNG raster image files. A flaw exists in libpng's simplified API where processing valid palette PNG images with partial transparency a...

FreeBSD : png -- Multiple vulnerabilities (4b297f5a-cbad-11f0-ac9f-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4b297f5a-cbad-11f0-ac9f-b42e991fc52e advisory. https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g reports: LIBPNG is ...

png -- Out-of-bounds read

https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f reports: Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing valid palette PNG images with partial transparency an...

Fedora 43 : libpng (2025-6af3ed0ae3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6af3ed0ae3 advisory. - several security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Photon OS 4.0: Libpng PHSA-2025-4.0-0917

An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0917. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mageia: Security Advisory (MGASA-2025-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-6af3ed0ae3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-13-CVE-2025-64505 CVE-2025-64505 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-64505 in the rootio-libpng1.6 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-64505 CVE-2025-64505 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-64505 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

Photon OS 5.0: Libpng PHSA-2025-5.0-0694

An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0694. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-4.0-0917

Updates of 'lz4', 'libpng', 'wireshark' packages of Photon OS have been released...

OESA-2025-2763 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: LIBPNG is a reference libra...

ROOT-OS-DEBIAN-12-CVE-2025-64720 CVE-2025-64720 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-64720 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

OPENSUSE-SU-2025:15781-1 libpng16-16-1.6.51-1.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed...

Important Photon OS Security Update - PHSA-2025-5.0-0694

Updates of 'libpng', 'linux-esx', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0694

Updates of 'libpng', 'linux', 'linux-esx' packages of Photon OS have been released...

LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

...

CVE-2025-65018

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing...

libpng: Multiple vulnerabilities

Background libpng is the official PNG reference library used to read, write and manipulate PNG images. Description Multiple vulnerabilities have been discovered in libpng. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

GLSA-202511-06 : libpng: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202511-06 libpng: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libpng. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...