libpng vulnerabilities (Red Hat)
41 vulnerabilities.
-
libpngRed Hat Fix CVE(s): CVE-2026-46675 5.9 Medium -
libpngRed Hat LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body 5.4 Medium -
libpngRed Hat LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure 5.1 Medium -
libpngRed Hat LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 7.6 High -
libpngRed Hat LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` 7.5 High -
libpngRed Hat pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow 4.8 Medium -
libpngRed Hat LIBPNG has a heap buffer overflow in png_set_quantize 8.3 High -
libpngRed Hat Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... 5.5 Medium -
libpngRed Hat Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... 5.5 Medium -
libpngRed Hat LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* 6.8 Medium -
libpngRed Hat LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) 6.1 Medium -
libpngRed Hat LIBPNG has an out-of-bounds read in png_image_read_composite 7.1 High -
libpngRed Hat LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` 7.1 High -
libpngRed Hat LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication 7.1 High -
libpngRed Hat LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images 6.1 Medium -
libpngRed Hat LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index 6.1 Medium -
libpngRed Hat libpng before 1.6.32 does not properly check the length of chunks against the user limit. 9.8 Critical -
libpngRed Hat Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2... 7.3 High -
libpngRed Hat Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before... 7.5 High -
libpngRed Hat The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,... 5.0 Medium -
libpngRed Hat The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x... 6.8 Medium -
libpngRed Hat Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,... 6.8 Medium -
libpngRed Hat Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers... 6.8 Medium -
libpngRed Hat The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1... 8.8 High -
libpngRed Hat Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x... 8.8 High -
libpngRed Hat The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45,... 6.5 Medium -
libpngRed Hat Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote... 6.5 Medium -
libpngRed Hat Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in... 9.8 Critical -
libpngRed Hat The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2... 4.3 Medium -
libpngRed Hat libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are... 4.3 Medium -
libpngRed Hat The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in... 6.8 Medium -
libpngRed Hat libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows... 7.5 High -
libpngRed Hat Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to... 5.0 Medium -
libpngRed Hat The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows... 5.0 Medium -
libpngRed Hat The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12... 2.6 Low -
libpngRed Hat Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent... 5.0 Medium -
libpngRed Hat Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions... 5.0 Medium -
libpngRed Hat The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a... 5.0 Medium -
libpngRed Hat Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote... 10.0 High -
libpngRed Hat The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a... 5.0 Medium -
libpngRed Hat Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate... 7.5 High