https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:31:50.631773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:0125 ALSA-2026:0125 — Important: mingw-libpng security update 2026-10-02T19:31:51.234135+00:00

Affected: AlmaLinux:8: mingw32-libpng, AlmaLinux:8: mingw32-libpng-static, AlmaLinux:8: mingw64-libpng, AlmaLinux:8: mingw64-libpng-static

MinGW Windows Libpng library.

Security Fix(es):

* libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-15390 bdu:2025-15390 2026-10-02T19:31:51.234216+00:00 bdu:2025-15390 https://cve.radiocsirt.org/vuln/bell-cve-2025-66293 BELL-CVE-2025-66293 2026-10-02T19:31:51.234234+00:00

Affected: Alpaquita:23: libpng, Alpaquita:25: libpng, Alpaquita:stream: libpng, BellSoft Hardened Containers:23: libpng, BellSoft Hardened Containers:25: libpng, BellSoft Hardened Containers:stream: libpng

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 certfr-2025-avi-1078 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-02T19:31:51.234260+00:00 certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/euvd-2026-262522 EUVD-2026-262522 2026-10-02T19:31:51.234276+00:00 EUVD-2026-262522 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66293 fkie_cve-2025-66293 2026-10-02T19:31:51.234287+00:00

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-66293 msrc_CVE-2025-66293 — LIBPNG has an out-of-bounds read in png_image_read_composite 2026-10-02T19:31:51.234311+00:00 msrc_CVE-2025-66293 https://cve.radiocsirt.org/vuln/oesa-2026-1124 OESA-2026-1124 — libpng security update 2026-10-02T19:31:51.234328+00:00

Affected: openEuler:20.03-LTS-SP4: libpng

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fix(es):

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15801-1 openSUSE-SU-2025:15801-1 — libpng16-16-1.6.52-1.1 on GA media 2026-10-02T19:31:51.234353+00:00

libpng16-16-1.6.52-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:0211 RHSA-2026:0211 — Red Hat Security Advisory: libpng security update 2026-10-02T19:31:51.234370+00:00

libpng: LIBPNG buffer overflow libpng: LIBPNG heap buffer overflow libpng: LIBPNG out-of-bounds read in png_image_read_composite

 https://cve.radiocsirt.org/vuln/suse-su-2025:21217-1 SUSE-SU-2025:21217-1 — Security update for libpng16 2026-10-02T19:31:51.234389+00:00

Security update for libpng16

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-66293 UBUNTU-CVE-2025-66293 2026-10-02T19:31:51.234405+00:00

Affected: Ubuntu:Pro:16.04:LTS: libpng1.6, Ubuntu:Pro:18.04:LTS: libpng1.6, Ubuntu:Pro:20.04:LTS: libpng1.6, Ubuntu:22.04:LTS: libpng1.6, Ubuntu:24.04:LTS: libpng1.6, Ubuntu:25.10: libpng1.6

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2737 WID-SEC-W-2025-2737 — libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2026-10-02T19:31:51.234433+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.