https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:26:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02923 bdu:2026-02923 https://cve.radiocsirt.org/vuln/bdu:2026-02923 https://cve.radiocsirt.org/vuln/bell-cve-2025-64505 <p><strong>Affected:</strong> Alpaquita:23: libpng, Alpaquita:25: libpng, Alpaquita:stream: libpng, BellSoft Hardened Containers:23: libpng, BellSoft Hardened Containers:25: libpng, BellSoft Hardened Containers:stream: libpng</p> <p><strong>Affected:</strong> Alpaquita:23: libpng, Alpaquita:25: libpng, Alpaquita:stream: libpng, BellSoft Hardened Containers:23: libpng, BellSoft Hardened Containers:25: libpng, BellSoft Hardened Containers:stream: libpng</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-64505 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/euvd-2026-261879 EUVD-2026-261879 https://cve.radiocsirt.org/vuln/euvd-2026-261879 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64505 <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&#39;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&#39;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64505 https://cve.radiocsirt.org/vuln/msrc_cve-2025-64505 msrc_CVE-2025-64505 https://cve.radiocsirt.org/vuln/msrc_cve-2025-64505 https://cve.radiocsirt.org/vuln/ncsc-2026-0101 NCSC-2026-0101 https://cve.radiocsirt.org/vuln/ncsc-2026-0101 https://cve.radiocsirt.org/vuln/oesa-2025-2763 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libpng, openEuler:24.03-LTS-SP2: libpng, openEuler:20.03-LTS-SP4: libpng, openEuler:22.03-LTS-SP3: libpng, openEuler:22.03-LTS-SP4: libpng, openEuler:24.03-LTS: libpng</p> <p>The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fix(es):</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&amp;apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng&amp;apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This i…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libpng, openEuler:24.03-LTS-SP2: libpng, openEuler:20.03-LTS-SP4: libpng, openEuler:22.03-LTS-SP3: libpng, openEuler:22.03-LTS-SP4: libpng, openEuler:24.03-LTS: libpng</p> <p>The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fix(es):</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&amp;apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng&amp;apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This i…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2763 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15781-1 <p>libpng16-16-1.6.51-1.1 on GA media</p> <p>libpng16-16-1.6.51-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15781-1 https://cve.radiocsirt.org/vuln/rhsa-2026:6732 <p>libpng: libpng: Denial of Service via buffer overflow in pngimage utility libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function libpng: LIBPNG heap buffer overflow via malformed palette index libpng: LIBPNG heap buffer over-read libpng: LIBPNG buffer overflow libpng: LIBPNG heap buffer overflow libpng: LIBPNG out-of-bounds read in png_image_read_composite libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API libpng: LIBPNG has a heap buffer overflow in png_set_quantize libpng: libpng: Arbitrary code execution due to use-after-free vulnerability libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion</p> <p>libpng: libpng: Denial of Service via buffer overflow in pngimage utility libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function libpng: LIBPNG heap buffer overflow via malformed palette index libpng: LIBPNG heap buffer over-read libpng: LIBPNG buffer overflow libpng: LIBPNG heap buffer overflow libpng: LIBPNG out-of-bounds read in png_image_read_composite libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API libpng: LIBPNG has a heap buffer overflow in png_set_quantize libpng: libpng: Arbitrary code execution due to use-after-free vulnerability libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion</p> https://cve.radiocsirt.org/vuln/rhsa-2026:6732 https://cve.radiocsirt.org/vuln/suse-su-2025:21217-1 <p>Security update for libpng16</p> <p>Security update for libpng16</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21217-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-64505 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng1.6, Ubuntu:Pro:18.04:LTS: libpng1.6, Ubuntu:Pro:20.04:LTS: libpng1.6, Ubuntu:22.04:LTS: libpng1.6, Ubuntu:24.04:LTS: libpng1.6, Ubuntu:25.10: libpng1.6</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&#39;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng, Ubuntu:Pro:16.04:LTS: libpng1.6, Ubuntu:Pro:18.04:LTS: libpng1.6, Ubuntu:Pro:20.04:LTS: libpng1.6, Ubuntu:22.04:LTS: libpng1.6, Ubuntu:24.04:LTS: libpng1.6, Ubuntu:25.10: libpng1.6</p> <p>LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng&#39;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-64505 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2663 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen und Code auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen und Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2663