6.1
Medium
CVE-2025-64505 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libpng 1.6 | earliest → < 1.6.51 | 1.6.51 |
Other CVEs of libpng
The 13 CVEs of libpng →
CVE-2026-40930
LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files
5.4
Medium
CVE-2026-34757
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
5.1
Medium
CVE-2026-33636
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
7.6
High
CVE-2026-33416
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
7.5
High