Pnggroup vulnerabilities

Products

• Libpng 14

Newest

• pnggroup libpng, libpng-apng +1 more LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body CVE-2026-40930 Fix available 5.4 MediumMay 19, 2026
• libpng, debian linux +1 more LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure CVE-2026-34757 Fix available 5.1 MediumApril 9, 2026
• libpng LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 CVE-2026-33636 Fix available 7.6 HighMarch 26, 2026
• libpng LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` CVE-2026-33416 Fix available 7.5 HighMarch 26, 2026
• pnggroup libpng pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow CVE-2026-3713 4.8 MediumMarch 8, 2026
• libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 more LIBPNG has a heap buffer overflow in png_set_quantize CVE-2026-25646 Fix available 8.3 HighFebruary 10, 2026
• libpng LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* CVE-2026-22801 Fix available 6.8 MediumJanuary 12, 2026
• libpng LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) CVE-2026-22695 Fix available 6.1 MediumJanuary 12, 2026
• libpng LIBPNG has an out-of-bounds read in png_image_read_composite CVE-2025-66293 Fix available 7.1 HighDecember 3, 2025
• libpng LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` CVE-2025-65018 Public exploitFix available 7.1 HighNovember 24, 2025
• libpng LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication CVE-2025-64720 Public exploitFix available 7.1 HighNovember 24, 2025
• libpng LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images CVE-2025-64506 Fix available 6.1 MediumNovember 24, 2025
• libpng LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index CVE-2025-64505 Fix available 6.1 MediumNovember 24, 2025
• libpng, debian linux, netapp ontap select deploy administration utility +2 more A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with... CVE-2021-4214 5.5 MediumAugust 24, 2022