CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

EUVD-2026-97704

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

CVE-2026-109260 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

CVE-2026-109260

The ImageMagick library versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak within the PNG encoder . The root cause is a failure to release allocated memory when libpng initialization fails. An attacker capable of repeatedly triggering PNG encoding operations that ...

libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

A flaw was found in libpng. This buffer overflow vulnerability allows a local attacker to cause a denial of service DoS by exploiting the pngcreatereadstruct function. This can lead to the affected system becoming unresponsive or crashing...

libpng: LIBPNG heap buffer over-read

A buffer over read flaw has been discovered in libpng. A heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through the simplified write API with convertto8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and image...

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can...

libpng: LIBPNG out-of-bounds read in png_image_read_composite

An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger...

libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...

libpng: LIBPNG heap buffer overflow

A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libpng: libpng-1.6.58-2.1.hum1 aarch64, s390x, x8664 libpng-devel-1.6.58-2.1.hum1 aarch64, s390x, x8664 libpng-static-1.6.58-2.1.hum1 aarch64, s390x, x8664 libpng-tools-1.6.58-2.1.hum1 aarch64,...

libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

A flaw was found in libpng, a reference library for PNG Portable Network Graphics raster image files. An integer truncation vulnerability exists in the pngwriteimage16bit and pngwriteimage8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row...

ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...