Out-of-bounds Read

🗓️ 23 Nov 2025 22:00:00Reported by Snyk Security DatabaseType

Out-of-bounds read in palette image processing with optimize alpha; upgrade the library to version 1.6.51 or newer.

Reporter	Title	Published	Views	Family All 385
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DataStage on Cloud Pak for Data	25 Feb 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability has addressed Multiple Vulnerabilities within Instana Agent container image	3 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2026.	27 Mar 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow (traditional and containers) March 2026	27 Mar 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	9 Jul 202622:44	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities in LIBPNG affects IBM Netezza Appliance	15 Apr 202611:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libpng affects IBM Netezza Appliance	22 Apr 202612:14	–	ibm
GithubExploit	Exploit for CVE-2025-64720	25 Nov 202510:19	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Libpng	22 Jan 202611:35	–	githubexploit

Vulners

Node

libpng libpngRange1.6.32–1.6.51

Source	Link
security	www.security.snyk.io/vuln/SNYK-CONAN-LIBPNG-14103025
cwe	www.cwe.mitre.org/data/definitions/CWE-125.html

18 Dec 2025 11:38Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.1

CVSS 47.1

EPSS0.00417

SSVC