Libpng vulnerabilities

Products

• Libpng 57
• Pngcheck 2

Newest

• libpng, debian linux +1 more LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure CVE-2026-34757 Fix available 5.1 MediumApril 9, 2026
• libpng LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 CVE-2026-33636 Fix available 7.6 HighMarch 26, 2026
• libpng LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` CVE-2026-33416 Fix available 7.5 HighMarch 26, 2026
• libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 more LIBPNG has a heap buffer overflow in png_set_quantize CVE-2026-25646 Fix available 8.3 HighFebruary 10, 2026
• libpng Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... CVE-2025-28164 Fix available 5.5 MediumJanuary 27, 2026
• libpng Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial... CVE-2025-28162 Fix available 5.5 MediumJanuary 27, 2026
• libpng LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* CVE-2026-22801 Fix available 6.8 MediumJanuary 12, 2026
• libpng LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) CVE-2026-22695 Fix available 6.1 MediumJanuary 12, 2026
• libpng LIBPNG has an out-of-bounds read in png_image_read_composite CVE-2025-66293 Fix available 7.1 HighDecember 3, 2025
• libpng LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` CVE-2025-65018 Public exploitFix available 7.1 HighNovember 24, 2025
• libpng LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication CVE-2025-64720 Public exploitFix available 7.1 HighNovember 24, 2025
• libpng LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images CVE-2025-64506 Fix available 6.1 MediumNovember 24, 2025
• libpng LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index CVE-2025-64505 Fix available 6.1 MediumNovember 24, 2025
• libpng, debian linux, netapp ontap select deploy administration utility +2 more A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with... CVE-2021-4214 5.5 MediumAugust 24, 2022
• libpng pngcheck, debian linux +1 more A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied)... CVE-2020-35511 Fix available 7.8 HighAugust 23, 2022
• libpng pngcheck, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 more A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a... CVE-2020-27818 Public exploitFix available 3.3 LowDecember 6, 2020
• libpng, netapp active iq unified manager +1 more libpng before 1.6.32 does not properly check the length of chunks against the user limit. CVE-2017-12652 Fix available 9.8 CriticalJuly 10, 2019
• libpng, netapp active iq unified manager, oncommand api services +2 more +4 more Out-of-bounds write in libpng CVE-2018-14550 Fix available 8.8 HighJuly 10, 2019
• libpng, canonical ubuntu linux, debian linux +29 more +31 more png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because... CVE-2019-7317 Fix available 5.3 MediumFebruary 4, 2019
• libpng ** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as... CVE-2019-6129 Fix availableDisputed 6.5 MediumJanuary 11, 2019
• libpng, oracle jdk, jre +2 more An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c,... CVE-2018-14048 Fix available 6.5 MediumJuly 13, 2018
• libpng, canonical ubuntu linux, oracle jdk +4 more +6 more In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ... CVE-2018-13785 Fix available 6.5 MediumJuly 9, 2018
• libpng The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4... CVE-2016-10087 Fix available 7.5 HighJanuary 22, 2017
• google android, libpng +1 more Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x... CVE-2016-3751 7.8 HighJuly 11, 2016
• libpng, debian linux, fedoraproject fedora +4 more +6 more Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1... CVE-2015-8540 Fix available 8.8 HighDecember 11, 2015
• libpng, apple mac os x +1 more Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2... CVE-2015-8472 Fix available 7.3 HighDecember 9, 2015
• libpng, apple mac os x, canonical ubuntu linux +16 more +18 more Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before... CVE-2015-8126 Fix available EPSS 10.3% 7.5 HighNovember 12, 2015
• libpng, canonical ubuntu linux, debian linux +7 more +9 more The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,... CVE-2015-7981 Fix available 5.0 MediumOctober 26, 2015
• libpng, apple mac os x, oracle solaris +2 more Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6... CVE-2015-0973 Fix available 7.5 HighJanuary 18, 2015
• libpng, apple mac os x +1 more Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x... CVE-2014-9495 Public exploitFix available 10.0 HighJanuary 7, 2015
• libpng Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial... CVE-2013-7354 Fix available 5.0 MediumMay 6, 2014
• libpng Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5... CVE-2013-7353 Fix available 5.0 MediumMay 6, 2014
• libpng The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through... CVE-2014-0333 Fix available 5.0 MediumFebruary 27, 2014
• libpng The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a... CVE-2013-6954 Fix available 5.0 MediumNovember 14, 2013
• libpng, canonical ubuntu linux, debian linux +1 more +3 more The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48,... CVE-2012-3425 Fix available 4.3 MediumAugust 13, 2012
• libpng Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5... CVE-2011-3464 7.5 HighJuly 22, 2012
• libpng The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x... CVE-2011-3048 Fix available 6.8 MediumApril 4, 2012
• google chrome, libpng, debian linux +10 more +12 more Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,... CVE-2011-3045 Fix available 6.8 MediumMarch 22, 2012
• libpng Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5... CVE-2009-5063 Fix available 5.0 MediumAugust 31, 2011
• libpng Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows... CVE-2006-7244 5.0 MediumAugust 31, 2011
• libpng, canonical ubuntu linux, debian linux +1 more +3 more The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1... CVE-2011-2692 Fix available 8.8 HighJuly 17, 2011
• libpng, debian linux, fedoraproject fedora +2 more The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x... CVE-2011-2691 Fix available 6.5 MediumJuly 17, 2011
• libpng, canonical ubuntu linux, debian linux +1 more +3 more Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x... CVE-2011-2690 8.8 HighJuly 17, 2011
• libpng, canonical ubuntu linux, debian linux +1 more +3 more The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45,... CVE-2011-2501 Fix available 6.5 MediumJuly 17, 2011
• libpng pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service ... CVE-2011-0408 6.8 MediumJanuary 18, 2011
• libpng, apple iphone os, itunes +9 more +11 more Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote... CVE-2010-2249 Fix available 6.5 MediumJune 30, 2010
• libpng, apple iphone os, itunes +14 more +16 more Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in... CVE-2010-1205 Public exploitFix available EPSS 43.4% 9.8 CriticalJune 30, 2010
• libpng, apple mac os x, canonical ubuntu linux +4 more +6 more The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2... CVE-2010-0205 4.3 MediumMarch 3, 2010
• libpng libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are... CVE-2009-2042 4.3 MediumJune 12, 2009
• libpng, apple iphone os, mac os x +6 more +8 more The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in... CVE-2009-0040 Fix available 6.8 MediumFebruary 22, 2009
• Show olderLoading…