libpng Heap Buffer Overflow DoS

The vulnerability of the library for working with PNG bitmap graphics involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

Libpng Heap Buffer Overflow DoS

The vulnerability of the library for working with PNG bitmap graphics involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

SUSE CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Out-of-bounds Write

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Out-of-bounds Write

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

GHSA-QMW5-2P58-XVRC ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder

An extremely large image profile could result in a heap overflow when encoding a PNG image...

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder

An extremely large image profile could result in a heap overflow when encoding a PNG image...

EUVD-2026-10392

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder...

EUVD-2026-10391

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder...

PT-2026-24634

An extremely large image profile could result in a heap overflow when encoding a PNG image...

CVE-2026-30883 ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

CVE-2026-3102

CVE-2026-3102 affects exiftool up to 13.49 on macOS, specifically the SetMacOSTags function in lib/Image/ExifTool/MacOS.pm within the PNG File Parser. The vulnerability arises from manipulating the DateTimeOriginal argument, enabling an OS command injection . The issue is described as exploitable...

CVE-2026-3102 exiftool PNG File MacOS.pm SetMacOSTags os command injection

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : libpng vulnerability (USN-8039-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8039-1 advisory. It was discovered that the libpng simplified API incorrectly handled quantizing RGB images. If a user or automated system were tricked into...