LibPNG_OSS-Fuzz

Фаззинг и анализ уязвимостей libpng Групповой проект по исследованию безопасности О фаззинге: Фаззинг — это автоматизированная техника тестирования ПО, при которой на вход программы подаются недопустимые, неожиданные или случайные данные для обнаружения ошибок и уязвимостей. Фаззинг с управлением...

CVE-2010-1205

Пример эксплуатации уязвимости CVE-2010-1205 в libpng =1.4.2 gregbook - набор примеров программ, распространяемых с исходниками libpng generate - генерирует вредоносный png-файл, вызывающий переполнение кучи heap-overflow при чтении файла с помощью libpng шаги для воспроизведения: ./build.sh сбор...

CVE-2025-64720-PoC

CVE-2025-64720 : Débordement de tampon dans libpng lors de la prémultiplication de palette Statut : Corrigé Gravité : Élevée CVE ID : CVE-2025-64720 Date de découverte : 2025-11-XX Divulgation publique : 2025-11-21 Présentation Résumé Une vulnérabilité de lecture hors limites existe dans la...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF 도전 과제: "PNG 패닉" 이 도전 과제는 libpng의 실제 버퍼 오버플로우 취약점특히 16비트 인터레이스 이미지 처리 시 간소화된 API pngimagefinishread와 관련된을 기반으로 합니다. 🚩 도전 목표 취약한 바이너리 victim이 제공됩니다. 이 바이너리는 정적으로 링크된 취약한 버전의 libpng를 사용합니다. 애플리케이션은 exploit.png라는 PNG 파일을 버퍼로 읽어들입니다. 목표는 힙 오버플로우를 트리거하여 이미지 버퍼 바로 뒤에 위치한 Logger 구조체의 함...

CVE-2026-40930

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. In version 1.8.0, a remote attacker could provide a specially crafted APNG Animated Portable Network Graphics file. This flaw allows attacker-controlled data within an ignored chunk to be...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

PoC для CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Использование: 1-нажмите кнопку share и сделайте скриншот 2-с помощью ftp перейдите по пути:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ вы найдете сделанный вами скриншот. 3-скопируйте его на пк и запустите с помощью makepng.py, о...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)

The version of AOS installed on the remote host is prior to 7.3.1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.16 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093149 advisory. The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093190 advisory. Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093170 advisory. The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093158 advisory. The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, there was a heap buffer over-read vulnerability in the libpng’s pngdoquantize function when processing PNG files with malformed palette...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.51 to 1.6.53, there was a potential issue of excessive memory access in the libpng simplified API function pngimagefinishread, when processing...

cups-filters security update

1.28.7-27.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.28.7-27 - CVE-2026-64612 cups-filters: handle libpng errors via longjmp/setjmp to prevent process abo...

Oracle Linux 8 : cups-filters (ELSA-2026-57451)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57451 advisory. 1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not...

cups-filters security update

1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.20.0-36.1 - CVE-2026-64612 cups-filters: Handle libpng errors via longjmp/setjmp...

USN-8639-1: libpng vulnerabilities

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2016-10087 It was discovered that libpng incorrectly handled certain malformed images. An...

USN-8639-1 libpng, libpng1.6 vulnerabilities

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2016-10087 It was discovered that libpng incorrectly handled certain malformed images. An...