Lucene search
+L

44 matches found

CVE
CVE
added 2026/01/12 10:57 p.m.75 views

CVE-2026-22801

From the connected documents: LIBPNG versions 1.6.26–1.6.53 contain an integer truncation in the simplified write API (png_write_image_16bit and png_write_image_8bit) that can cause a heap over-read when the caller provides a negative row stride (bottom-up layouts) or a stride > 65535 bytes. T...

7.8CVSS6.7AI score0.00114EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/12 10:57 p.m.37 views

CVE-2026-22801 LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit causes heap buffer...

6.8CVSS0.00114EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/12 11:15 a.m.5 views

SUSE-SU-2026:20073-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in pngdoquantize when processing PNG files malformed palette indices bsc1254157. - CVE-2025-64506: heap buffer over-read in pngwriteimage8bit when processing 8-bit input with convertto8bit enabled...

7.1CVSS6AI score0.00407EPSS
SaveExploits6References11
RedhatCVE
RedhatCVE
added 2025/12/09 8:26 p.m.9 views

CVE-2025-29843

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/04 3:15 p.m.7 views

CVE-2025-29843

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files...

5.4CVSS0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/04 3:0 p.m.31 views

CVE-2025-29843

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files...

5.4CVSS0.00359EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/01 10:1 p.m.11 views

MGASA-2025-0314 Updated libpng packages fix security vulnerabilities

LIBPNG is vulnerable to a heap buffer overflow in pngdoquantize via malformed palette index. CVE-2025-64505 LIBPNG is vulnerable to a heap buffer over-read in pngwriteimage8bit with grayscale+alpha or RGB/RGBA images. CVE-2025-64506 LIBPNG is vulnerable to a buffer overflow in pngimagereadcomposi...

7.1CVSS7.4AI score0.00407EPSS
SaveExploits5References3
OSV
OSV
added 2025/11/28 12:51 p.m.9 views

OESA-2025-2763 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: LIBPNG is a reference libra...

7.1CVSS7.4AI score0.00407EPSS
SaveExploits5References5
NVD
NVD
added 2025/11/25 12:15 a.m.6 views

CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS0.00137EPSS
SaveExploits2References3
OSV
OSV
added 2025/11/25 12:15 a.m.13 views

AZL-70897 CVE-2025-64506 affecting package fltk 1.3.5-4

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS6.2AI score0.00137EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.5 views

libpng 缓冲区错误漏洞

libpng is an open source PNG reference library from The PNG Development Group that enables the creation, reading and writing of PNG graphic files. A buffer error vulnerability exists in libpng version 1.6.0 through versions prior to 1.6.51, which stems from a heap buffer out-of-bounds read in the...

6.1CVSS6.5AI score0.00137EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/11/24 11:41 p.m.9 views

CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS7AI score0.00137EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/11/24 11:41 p.m.7 views

EUVD-2025-199238

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS6.8AI score0.00137EPSS
SaveExploits2References3
AlpineLinux
AlpineLinux
added 2025/11/24 11:41 p.m.16 views

CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS7.3AI score0.00137EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-2165

Malware in sbrugna...

6.5CVSS6.7AI score0.01622EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.7 views

SUSE CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

4CVSS6.8AI score0.02019EPSS
SaveExploits1References12
OSV
OSV
added 2019/06/26 6:15 p.m.10 views

UBUNTU-CVE-2019-12977

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c...

7.8CVSS6.9AI score0.01883EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/05/21 12:0 a.m.16 views

PT-2019-5890 · Imagemagick +6 · Imagemagick +6

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNGImage function, which can allow a remote attacker to access confidential data and cause a denial of service. The problem is...

9.8CVSS6.6AI score0.05916EPSS
SaveExploits91References495
CNVD
CNVD
added 2018/11/27 12:0 a.m.5 views

ImageMagick Denial of Service Vulnerability (CNVD-2018-26703)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WritePDBImage' function in the coders/pdb.c file in ImageMagick version...

6.5CVSS7.3AI score0.01714EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/20 12:0 a.m.6 views

UBUNTU-CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS6.9AI score0.03295EPSS
SaveExploits1References3
Rows per page
Query Builder