Most recent entries from all

ALSA-2026:0125 — Important: mingw-libpng security update

Affected: AlmaLinux:8: mingw32-libpng, AlmaLinux:8: mingw32-libpng-static, AlmaLinux:8: mingw64-libpng, AlmaLinux:8: mingw64-libpng-static

MinGW Windows Libpng library.

Security Fix(es):

* libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-15390

BELL-CVE-2025-66293

Affected: Alpaquita:23: libpng, Alpaquita:25: libpng, Alpaquita:stream: libpng, BellSoft Hardened Containers:23: libpng, BellSoft Hardened Containers:25: libpng, BellSoft Hardened Containers:stream: libpng

certfr-2025-avi-1078 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu…

certfr-2025-avi-1078

EUVD-2026-262522

fkie_cve-2025-66293

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

msrc_CVE-2025-66293 — LIBPNG has an out-of-bounds read in png_image_read_composite

msrc_CVE-2025-66293

OESA-2026-1124 — libpng security update

Affected: openEuler:20.03-LTS-SP4: libpng

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fix(es):

openSUSE-SU-2025:15801-1 — libpng16-16-1.6.52-1.1 on GA media

libpng16-16-1.6.52-1.1 on GA media

RHSA-2026:0211 — Red Hat Security Advisory: libpng security update

libpng: LIBPNG buffer overflow libpng: LIBPNG heap buffer overflow libpng: LIBPNG out-of-bounds read in png_image_read_composite

SUSE-SU-2025:21217-1 — Security update for libpng16

Security update for libpng16

UBUNTU-CVE-2025-66293

Affected: Ubuntu:Pro:16.04:LTS: libpng1.6, Ubuntu:Pro:18.04:LTS: libpng1.6, Ubuntu:Pro:20.04:LTS: libpng1.6, Ubuntu:22.04:LTS: libpng1.6, Ubuntu:24.04:LTS: libpng1.6, Ubuntu:25.10: libpng1.6

WID-SEC-W-2025-2737 — libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.