CVE-2025-64720-PoC

CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplication Status : Patched Severity : High CVE ID : CVE-2025-64720 Discovery Date : 2025-11-XX Public Disclosure : 2025-11-21 Overview Summary An out-of-bounds read vulnerability exists in libpng's pngimagereadcomposite function when...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. 🚩 Challenge Goal You are provided with a vulnerable binary victim that...

[SECURITY] Fedora 45 Update: libpng12-1.2.57-27.fc45

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 45 Update: libpng15-1.5.30-27.fc45

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

LibPNG_OSS-Fuzz

Fuzzing and Vulnerability Analysis of libpng Group Security Research Project About Fuzzing: Fuzzing is an automated software testing technique that provides invalid, unexpected, or random data as inputs to a program to discover bugs and vulnerabilities. Coverage-guided fuzzing uses code coverage...

CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

Fedora 45 : mingw-libpng (2026-0c0574dd9a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c0574dd9a advisory. Update to libpng-1.6.59, fixes CVE-2026-46675. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CLEANSTART-2026-RI13630 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

Security vulnerability affects the apache-zookeeper package. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

CLEANSTART-2026-KY94058 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

Security vulnerability affects the apache-zookeeper package. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

CLEANSTART-2026-UA73255 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

Security vulnerability affects the apache-zookeeper package. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

CentOS Linux 6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792994241)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792994241 advisory. - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before...

libpng: Fix of 3 CVEs

CVE-2016-10087: fix NULL pointer dereference in pngsettext2 - CVE-2026-25646: fix heap buffer overflow in pngsetdither - CVE-2026-33416: fix use-after-free on pngptr palette and trans buffers...

CLSA-2026-1792993907 libpng: Fix of 3 CVEs

CVE-2016-10087: fix NULL pointer dereference in pngsettext2 - CVE-2026-25646: fix heap buffer overflow in pngsetdither - CVE-2026-33416: fix use-after-free on pngptr palette and trans buffers...

Fedora 44 : mingw-libpng (2026-2ff2251161)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ff2251161 advisory. Update to libpng-1.6.59, fixes CVE-2026-46675. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

[SECURITY] Fedora 43 Update: libpng15-1.5.30-27.fc43

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 44 Update: libpng15-1.5.30-27.fc44

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 44 Update: libpng12-1.2.57-27.fc44

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261653 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2026-22801, CVE-2007-2445, CVE-2007-5269,...

Linux Distros Unpatched Vulnerability : CVE-2026-109260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initializati...