libpng1.6 vulnerabilities (Debian)
30 vulnerabilities.
-
libpng1.6Debian Fix CVE(s): CVE-2026-46675 5.9 Medium -
libpng1.6Debian LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body 5.4 Medium -
libpng1.6Debian LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure 5.1 Medium -
libpng1.6Debian LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 7.6 High -
libpng1.6Debian LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` 7.5 High -
libpng1.6Debian pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow 4.8 Medium -
libpng1.6Debian LIBPNG has a heap buffer overflow in png_set_quantize 8.3 High -
libpng1.6Debian Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... 5.5 Medium -
libpng1.6Debian Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... 5.5 Medium -
libpng1.6Debian LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* 6.8 Medium -
libpng1.6Debian LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) 6.1 Medium -
libpng1.6Debian LIBPNG has an out-of-bounds read in png_image_read_composite 7.1 High -
libpng1.6Debian LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` 7.1 High -
libpng1.6Debian LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication 7.1 High -
libpng1.6Debian LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images 6.1 Medium -
libpng1.6Debian LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index 6.1 Medium -
libpng1.6Debian A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with... 5.5 Medium -
libpng1.6Debian libpng before 1.6.32 does not properly check the length of chunks against the user limit. 9.8 Critical -
libpng1.6Debian Out-of-bounds write in libpng 8.8 High -
libpng1.6Debian png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because... 5.3 Medium -
libpng1.6Debian ** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as... 6.5 Medium -
libpng1.6Debian An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c,... 6.5 Medium -
libpng1.6Debian In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ... 6.5 Medium -
libpng1.6Debian The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4... 7.5 High -
libpng1.6Debian Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2... 7.3 High -
libpng1.6Debian Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6... 7.5 High -
libpng1.6Debian Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x... 10.0 High -
libpng1.6Debian Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial... 5.0 Medium -
libpng1.6Debian Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5... 5.0 Medium -
libpng1.6Debian The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through... 5.0 Medium