459 matches found
AZL-70921 CVE-2025-64720 affecting package openjpeg2 2.3.1-12
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
AZL-70972 CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
ALPINE-CVE-2025-64720
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
AZL-70888 CVE-2025-64720 affecting package fltk 1.3.5-4
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
CVE-2025-64720
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
CVE-2025-64720
Summary (CVE-2025-64720) libpng up to version 1.6.50 contains an out-of-bounds read in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA, due to incorrect background compositing during premultiplication that violates an invariant. The issue is fixed in version 1...
CVE-2025-64720
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngimagereadcomposite function when reading palette images with the PNGFLAGOPTIMIZEALPHA flag set. An attacker can supply a specially-crafted PNG image that triggers an invalid alpha pre-multiplication...
EUVD-2025-178373
Malicious code in interface-iota-tau-optimize-bundle npm...
EUVD-2025-177429
Malicious code in optimize-daemon-scale-char-test npm...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...
EUVD-2025-178156
Malicious code in lambda-quick-monitor-optimize-book npm...
EUVD-2025-179391
Malicious code in data-node-sanitize-balance-optimize npm...
EUVD-2025-175622
Malicious code in web-container-container-sigma-optimize npm...
EUVD-2025-176176
Malicious code in string-optimize-class-link-authorize npm...
EUVD-2025-177424
Malicious code in optimize-theta-process-cluster-dog npm...
EUVD-2025-177434
Malicious code in optimize-cache-static-orchestrate-import npm...