3704 matches found
Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2025-1306)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1306 advisory. A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array boun...
Mageia: Security Advisory (MGASA-2025-0323)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libpng16-16-1.6.52-1.1 on GA media (moderate)
libpng16-16-1.6.52-1.1 on GA media Announcement ID: openSUSE-SU-2025:15801-1 Rating: moderate Cross-References: CVE-2025-66293 CVSS scores: CVE-2025-66293 SUSE : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVE-2025-66293 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:...
Fedora: Security Advisory (FEDORA-2025-f54c75f2f9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-9d0f04f316)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2023 : firefox (ALAS2023-2025-1305)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1305 advisory. A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array boun...
Fedora 43 : mingw-libpng (2025-f54c75f2f9)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f54c75f2f9 advisory. Update to libpng-1.6.51. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
MGASA-2025-0323 Updated libpng packages fix security vulnerability
LIBPNG has an out-of-bounds read in pngimagereadcomposite. CVE-2025-66293...
Updated libpng packages fix security vulnerability
LIBPNG has an out-of-bounds read in pngimagereadcomposite. CVE-2025-66293...
Debian dla-4396 : libpng-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4396 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4396-1 [email protected]...
Important: thunderbird
Issue Overview: A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array bounds are not validated against externally-supplied image data, allowing an attacker to craf...
Important: firefox
Issue Overview: A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array bounds are not validated against externally-supplied image data, allowing an attacker to craf...
Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2025-048 (ALASFIREFOX-2025-048)
The version of firefox installed on the remote host is prior to 140.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-048 advisory. A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with...
Amazon Linux 2 : thunderbird, --advisory ALAS2-2025-3091 (ALAS-2025-3091)
The version of thunderbird installed on the remote host is prior to 140.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3091 advisory. A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with...
Important: libpng
Issue Overview: A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array bounds are not validated against externally-supplied image data, allowing an attacker to craf...
Important: firefox
Issue Overview: A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array bounds are not validated against externally-supplied image data, allowing an attacker to craf...
[SECURITY] [DLA 4396-1] libpng1.6 security update
Debian LTS Advisory DLA-4396-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2025 https://wiki.debian.org/LTS Package : libpng1.6 Version : 1.6.37-3+deb11u1 CVE ID : CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Debian Bug ...
CVE-2025-66293 affecting package libpng for versions less than 1.6.52-1
CVE-2025-66293 affecting package libpng for versions less than 1.6.52-1. An upgraded version of the package is available that resolves this issue...