libpng vulnerabilities (Mageia)
37 vulnerabilities.
-
libpngMageia Fix CVE(s): CVE-2026-46675 5.9 Medium -
libpngMageia LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body 5.4 Medium -
libpngMageia LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 7.6 High -
libpngMageia LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` 7.5 High -
libpngMageia LIBPNG has a heap buffer overflow in png_set_quantize 8.3 High -
libpngMageia LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* 6.8 Medium -
libpngMageia LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) 6.1 Medium -
libpngMageia LIBPNG has an out-of-bounds read in png_image_read_composite 7.1 High -
libpngMageia LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` 7.1 High -
libpngMageia LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication 7.1 High -
libpngMageia LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images 6.1 Medium -
libpngMageia LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index 6.1 Medium -
libpngMageia png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because... 5.3 Medium -
libpngMageia In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ... 6.5 Medium -
libpngMageia The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4... 7.5 High -
libpngMageia Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to... 8.8 High -
libpngMageia The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome... 6.5 Medium -
libpngMageia The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction... 8.8 High -
libpngMageia extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not... 7.5 High -
libpngMageia WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in... 6.5 Medium -
libpngMageia The createCustomType function in extensions/renderer/resources/binding.js in the extension... 6.5 Medium -
libpngMageia The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as... 8.8 High -
libpngMageia The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings... 8.8 High -
libpngMageia Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2... 7.3 High -
libpngMageia Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before... 7.5 High -
libpngMageia Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x... 10.0 High -
libpngMageia The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly... 5.0 Medium -
libpngMageia Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox... 7.5 High -
libpngMageia The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and... 7.5 High -
libpngMageia The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in... 6.4 Medium -
libpngMageia Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0,... 7.5 High -
libpngMageia Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,... 7.5 High -
libpngMageia Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC... 4.3 Medium -
libpngMageia Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial... 5.0 Medium -
libpngMageia Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5... 5.0 Medium -
libpngMageia The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through... 5.0 Medium -
libpngMageia The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a... 5.0 Medium