Lucene search
K

41 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в libpng1.6

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS7AI score0.00905EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.7 views

Alibaba Cloud Linux 3 : 0074: libpng15 (ALINUX3-SA-2026:0074)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0074 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25646: LIBPNG is a reference library for u...

8.3CVSS7.3AI score0.00905EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/03 12:0 a.m.2 views

RHEL 8 : libpng15 (RHSA-2026:6467)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6467 advisory. The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files...

8.3CVSS6.2AI score0.00905EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2026/04/02 12:18 p.m.1 views

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

8.3CVSS6.1AI score0.00905EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/04/02 12:4 p.m.1 views

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

8.3CVSS6.3AI score0.00905EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/04/02 11:12 a.m.3 views

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

8.3CVSS6.1AI score0.00905EPSS
Exploits1References7
Redos
Redos
added 2026/04/01 12:0 a.m.2 views

ROS-20260401-73-0017

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

6.1CVSS6AI score0.00181EPSS
Exploits2
Redos
Redos
added 2026/04/01 12:0 a.m.3 views

ROS-20260401-73-0015

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

6.1CVSS6AI score0.00181EPSS
Exploits2
Redos
Redos
added 2026/04/01 12:0 a.m.4 views

ROS-20260401-73-0024

A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...

8.3CVSS6.5AI score0.00905EPSS
Exploits1
Redos
Redos
added 2026/04/01 12:0 a.m.5 views

ROS-20260401-73-0026

A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...

8.3CVSS6.6AI score0.00905EPSS
Exploits1
OSV
OSV
added 2026/03/24 4:21 p.m.2 views

JLSEC-2026-11 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portabl...

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6AI score0.00905EPSS
Exploits1References4
Rosalinux
Rosalinux
added 2026/03/22 6:27 p.m.7 views

Advisory ROSA-SA-2026-3216

software: libpng 1.6.53 WASP: ROSA-CHROME unaffected versions = libpng-1.6.53-1 affected versions libpng-1.6.53-1 CVE-ID: CVE-2025-64505 BDU-ID: 2026-02923 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics libra...

7.1CVSS7AI score0.00294EPSS
Exploits6
RedHat Linux
RedHat Linux
added 2026/03/17 10:23 a.m.11 views

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

8.3CVSS5.9AI score0.00905EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/03/09 1:35 a.m.2 views

Important: Red Hat Security Advisory: libpng15 security update

An update for libpng15 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

8.3CVSS6.3AI score0.00905EPSS
Exploits1References2
Amazon
Amazon
added 2026/03/06 12:0 a.m.3 views

Medium: libpng

Issue Overview: libpng: An out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to...

8.3CVSS5.9AI score0.00905EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2026/03/03 12:51 p.m.2 views

libpng: LIBPNG has a heap buffer overflow in png_set_quantize

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...

8.3CVSS5.9AI score0.00905EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/03/03 12:52 a.m.4 views

Important: Red Hat Security Advisory: libpng security update

An update for libpng is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.3CVSS6.3AI score0.00905EPSS
Exploits2References4
OSV
OSV
added 2026/03/02 11:23 a.m.5 views

CLSA-2026-1772450608 libpng15: Fix of CVE-2026-25646

CVE-2026-25646: fix heap buffer overflow in pngsetquantize caused by stale palette indices in the color distance hash table...

8.3CVSS6.2AI score0.00905EPSS
Exploits1References1
OSV
OSV
added 2026/02/26 12:0 a.m.3 views

ALSA-2026:3405 Important: libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security Fixes: libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of...

8.3CVSS6.1AI score0.00905EPSS
Exploits2References8
OSV
OSV
added 2026/02/10 6:16 p.m.3 views

AZL-77457 CVE-2026-25646 affecting package fltk 1.3.5-4

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6AI score0.00905EPSS
Exploits1References1
Rows per page
Query Builder