Fedora 46 : libpng15 (2026-fc041839f8)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc041839f8 advisory. Automatic update for libpng15-1.5.30-27.fc46. Changelog Sun Oct 11 2026 Michal Hlavinka - 1.5.30-27 - fix CVE-2025-64505: heap buffer overflow via...

Rocky Linux 9.6 [TuxCare] Security Update: libpng15 (ALMALINUX9.6:CLSA-2026:1776422998)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776422998 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

AlmaLinux 9.2 [TuxCare] Security Update: libpng15 (ALMALINUX9.2:CLSA-2026:1776424888)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776424888 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. I...

K000163052: libpng vulnerability CVE-2026-33416

Security Advisory Description LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo,...

Unity Linux 20.1070a Security Update: libpng12 (UTSA-2026-099543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099543 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101169 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1070a Security Update: libpng15 (UTSA-2026-099555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099555 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Oracle Linux 7 : libpng12 (ELSA-2026-43702)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-43702 advisory. - Fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE Orabug: 39771480 Tenable has extracted the preceding description block...

Alibaba Cloud Linux 3 : 0174: libpng (ALINUX3-SA-2026:0174)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0174 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33416: LIBPNG is a reference library for u...

Alibaba Cloud Linux 3 : 0163: libpng15 (ALINUX3-SA-2026:0163)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0163 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33416: LIBPNG is a reference library for u...

libpng security update

2:1.6.37-15.2 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161448 2:1.6.37-15.1 - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon RHEL-161299...

Oracle Linux 8 : libpng12 (ELSA-2026-26348)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-26348 advisory. 1.2.57-7 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161345 Tenable has extracted the preceding description blo...

Oracle Linux 10 : libpng (ELSA-2026-18064)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18064 advisory. 2:1.6.40-8.4 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161324 Tenable has extracted the preceding descriptio...

CLSA-2026-1778928586 libpng: Fix of CVE-2026-34757

CVE-2026-34757: use-after-free in pngsetPLTE, pngsettRNS, pngsethIST, pngsettext, pngsetsPLT and pngsetunknownchunks when the caller passes the pointer returned by the corresponding getter back to the setter...

LIBPNG Heap Buffer Overflow DoS

The vulnerability of the pngsettRNS and pngsetPLTE functions in the LIBPNG library is related to improper memory management during data deallocation. Exploiting this vulnerability may allow an attacker to gain access to the freed memory area, which could lead to the execution of arbitrary code or...

SUSE-SU-2026:1601-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-34757: information disclosure and data corruption due to use-after-free in pngsetPLTE, pngsettRNS and pngsethIST bsc1261957...

SUSE SLES15: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2026:1323-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1323-1 advisory. - CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE can lead to arbitrary code execution bsc1260754. Tenable...

SUSE-SU-2026:1311-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE can lead to arbitrary code execution bsc1260754...

Important: libpng12

Issue Overview: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single...

OPENSUSE-SU-2026:20466-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE can lead to arbitrary code execution bsc1260754. - CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and...