Skip to contentPnggroup Libpng vulnerabilities
- pnggroup libpng, libpng-apng +1 moreLIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk bodyCVE-2026-40930Fix available5.4 Medium
- libpng, debian linux +1 moreLIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosureCVE-2026-34757Fix available5.1 Medium
- libpngLIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64CVE-2026-33636Fix available7.6 High
- libpngLIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`CVE-2026-33416Fix available7.5 High
- pnggroup libpngpnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflowCVE-2026-37134.8 Medium
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- libpngLIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*CVE-2026-22801Fix available6.8 Medium
- libpngLIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)CVE-2026-22695Fix available6.1 Medium
- libpngLIBPNG has an out-of-bounds read in png_image_read_compositeCVE-2025-66293Fix available7.1 High
- libpngLIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`CVE-2025-65018Public exploitFix available7.1 High
- libpngLIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplicationCVE-2025-64720Public exploitFix available7.1 High
- libpngLIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA imagesCVE-2025-64506Fix available6.1 Medium
- libpngLIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette indexCVE-2025-64505Fix available6.1 Medium
- libpng, debian linux, netapp ontap select deploy administration utility +2 moreA heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with...CVE-2021-42145.5 Medium