ROS-20260401-73-0022

A vulnerability in the PNG raster graphics library Libpng is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

ROS-20260401-73-0023

A vulnerability in the PNG raster graphics library Libpng is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

Fedora 45 : libpng15 (2026-dfa60d30bc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dfa60d30bc advisory. Automatic update for libpng15-1.5.30-25.fc45. Changelog Wed Apr 1 2026 Michal Hlavinka - 1.5.30-25 - fix CVE-2026-25646: heap buffer overflow in pngsetquanti...

ROOT-OS-DEBIAN-12-CVE-2026-22801 CVE-2026-22801 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2026-22801 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-22695 CVE-2026-22695 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2026-22695 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

DSA-6189-1 libpng1.6 - security update

Bulletin has no description...

libpng16-16-1.6.56-1.1 on GA media (moderate)

libpng16-16-1.6.56-1.1 on GA media Announcement ID: openSUSE-SU-2026:10451-1 Rating: moderate Cross-References: CVE-2026-33416 CVE-2026-33636 CVSS scores: CVE-2026-33416 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33416 SUSE : 9.2...

Mageia: Security Advisory (MGASA-2026-0070)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

...

Oracle Linux 7 : libpng (ELSA-2026-4756)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-4756 advisory. - Fix CVE-2026-25646 Orabug: 39093556 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

CVE-2026-33636

A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.56-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Use-after-free via pointer aliasing in pngsettRNS and...

Slackware: Security Advisory (SSA:2026-085-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current libpng Multiple Vulnerabilities (SSA:2026-085-02)

The version of libpng installed on the remote host is prior to 1.6.56. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-085-02 advisory. New libpng packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the precedin...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the pngsettRNS and pngsetPLTE functions, where a heap-allocated buffer is aliased between two structures with independent lifetimes. An attacker can cause memory corruption or potentially execute arbitrary code by...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the NEON palette expansion functions in arm/paletteneonintrinsics.c. An attacker can corrupt memory or crash the application by supplying a PNG row whose width is not a multiple of the NEON chunk size. Notes -...

AZL-81348 CVE-2026-33636 affecting package optipng 0.7.8-5

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...

DEBIAN-CVE-2026-33636

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...

CVE-2026-33636

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...

AZL-81312 CVE-2026-33636 affecting package fltk 1.3.8-1

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...