3625 matches found
libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read
A flaw was found in libpng, a reference library for processing PNG Portable Network Graphics image files. A local attacker could exploit a heap buffer over-read vulnerability in the pngimagefinishread function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with ...
libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion
A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...
libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API
A flaw was found in libpng, a reference library for PNG Portable Network Graphics raster image files. An integer truncation vulnerability exists in the pngwriteimage16bit and pngwriteimage8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row...
libpng: LIBPNG out-of-bounds read in png_image_read_composite
An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger...
libpng: libpng: Denial of Service via buffer overflow in pngimage utility
A flaw was found in libpng. A local attacker can exploit a buffer overflow vulnerability in the pngimage utility when processed with AddressSanitizer ASan. This flaw causes memory leaks, leading to high memory usage and ultimately rendering the program unresponsive, resulting in a denial of servi...
Photon OS 5.0: Libpng PHSA-2026-5.0-0802
An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-33636 affecting package libpng for versions less than 1.6.56-1
CVE-2026-33636 affecting package libpng for versions less than 1.6.56-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-33416 affecting package libpng for versions less than 1.6.56-1
CVE-2026-33416 affecting package libpng for versions less than 1.6.56-1. An upgraded version of the package is available that resolves this issue...
Fedora: Security Advisory (FEDORA-2026-7576b56379)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2026-f911c124c2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MiracleLinux 8 : libpng15-1.5.30-8.el8_10 (AXSA:2026-404:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-404:02 advisory. libpng: LIBPNG has a heap buffer overflow in pngsetquantize CVE-2026-25646 Tenable has extracted the preceding description block directly from the MiracleLinu...
[SECURITY] Fedora 42 Update: mingw-libpng-1.6.56-1.fc42
MinGW Windows Libpng library...
[SECURITY] Fedora 43 Update: mingw-libpng-1.6.56-1.fc43
MinGW Windows Libpng library...
Fedora 42 : mingw-libpng (2026-f911c124c2)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f911c124c2 advisory. Update to libpng-1.6.56. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 43 : mingw-libpng (2026-7576b56379)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7576b56379 advisory. Update to libpng-1.6.56. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
AlmaLinux 8 : libpng15 (ALSA-2026:6439)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:6439 advisory. libpng: LIBPNG has a heap buffer overflow in pngsetquantize CVE-2026-25646 Tenable has extracted the preceding description block directly from the AlmaLinux securi...
Debian dla-4521 : libpng-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4521 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4521-1 [email protected]...
Critical Photon OS Security Update - PHSA-2026-5.0-91-0802
Updates of 'python3', 'python3-pyOpenSSL', 'libpng', 'strongswan', 'python3-requests', 'nghttp2', 'sqlite', 'glibc', 'rubygem-activesupport', 'etcd', 'python3-Pygments' packages of Photon OS have been released...