3549 matches found
CVE-2025-64505
CVE-2025-64505 describes a heap buffer over-read in libpng’s png_do_quantize when processing PNGs with malformed palette indices, caused by improper bounds checking of palette_lookup against externally supplied image data. The vulnerability is fixed in libpng 1.6.51. Connected advisories note pac...
CVE-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette...
CVE-2025-64505
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette...
The vulnerability of the png_image_finish_read() function in the library for working with PNG bitmap graphics in libpng allows a hacker to execute arbitrary code.
The vulnerability of the pngimagefinishread function in the library for working with PNG bitmap graphics in libpng is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by loading a specially crafted PNG file...
Slackware: Security Advisory (SSA:2025-327-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
png -- Multiple vulnerabilities
https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g reports: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow...
Linux Distros Unpatched Vulnerability : CVE-2025-65018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to...
Linux Distros Unpatched Vulnerability : CVE-2025-64720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngimagefinishread function when processing 16-bit interlaced PNG images and converting them to an 8-bit output format. An attacker can create interlaced PNG files that trigger heap writes beyond the allocated...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngwriteimage8bit function, which incorrectly processes 8-bit image data as 16-bit when the simplified write API is used with convertto8bit enabled. An attacker can craft a malicious 8-bit PNG image, causing i...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngdoquantize function, which lacks validation of external image data. An attacker can create a PNG file containing out-of-range palette indices, leading to out-of-bounds memory access. Remediation Upgrade...
Slackware Linux 15.0 / current libpng Multiple Vulnerabilities (SSA:2025-327-01)
The version of libpng installed on the remote host is prior to 1.6.51. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-327-01 advisory. New libpng packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the precedin...
PT-2025-47830
Name of the Vulnerable Software and Affected Versions LIBPNG versions 1.6.0 through 1.6.50 Description LIBPNG is a library used by applications to read, create, and manipulate PNG image files. A heap buffer over-read issue exists in the png write image 8bit function when processing 8-bit images...
PT-2025-47832
Name of the Vulnerable Software and Affected Versions libpng versions 1.6.0 through 1.6.50 libpng1.6 affected versions not specified Description The libpng library contains a heap buffer overflow issue in the png image finish read function when processing 16-bit interlaced PNGs with 8-bit output...
EUVD-2018-5974
Malware in sbrugna...
EUVD-2021-0701
Malware in sbrugna...
EUVD-2019-16860
Malware in sbrugna...
EUVD-2011-2488
Malware in sbrugna...