Libpng - vulnerabilities (CVEs)
60 CVEs in 3 products, 0 in the last 30 days, newest from 2026-04-09.
Products
Newest CVEs of Libpng
- CVE-2026-34757 - CVSS 5.1 (medium), 2026-04-09: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to…
- CVE-2026-33636 - CVSS 7.6 (high), 2026-03-26: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36…
- CVE-2026-33416 - CVSS 7.5 (high), 2026-03-26: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1…
- CVE-2026-3713 - CVSS 5.3 (medium), 2026-03-08: A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the…
- CVE-2026-25646 - CVSS 8.3 (high), 2026-02-10: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55,…
- CVE-2025-28164 - CVSS 5.5 (medium), 2026-01-27: Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.
- CVE-2025-28162 - CVSS 5.5 (medium), 2026-01-27: Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the…
- CVE-2026-22801 - CVSS 7.8 (high), 2026-01-12: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to…
- CVE-2026-22695 - CVSS 7.1 (high), 2026-01-12: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to…
- CVE-2025-66293 - CVSS 7.1 (high), 2025-12-03: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52,…
- CVE-2025-64720 - CVSS 7.1 (high), 2025-11-25: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0…
- CVE-2025-64506 - CVSS 6.1 (medium), 2025-11-25: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0…
- CVE-2025-64505 - CVSS 6.1 (medium), 2025-11-25: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version…
- CVE-2025-65018 - CVSS 7.1 (high), 2025-11-25: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0…
- CVE-2021-4214 - CVSS 5.5 (medium), 2022-08-24: A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to…
- CVE-2020-35511 - CVSS 7.8 (high), 2022-08-23: A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
- CVE-2020-27818 - CVSS 3.3 (low), 2020-12-08: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a…
- CVE-2017-12652 - CVSS 9.8 (critical), 2019-07-10: libpng before 1.6.32 does not properly check the length of chunks against the user limit.
- CVE-2018-14550 - CVSS 8.8 (high), 2019-07-10: An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c…
- CVE-2019-7317 - CVSS 5.3 (medium), 2019-02-04: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
- CVE-2019-6129 - CVSS 6.5 (medium), 2019-01-11: png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job…
- CVE-2018-14048 - CVSS 6.5 (medium), 2018-07-13: An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
- CVE-2018-13785 - CVSS 6.5 (medium), 2018-07-09: In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant…
- CVE-2016-10087 - CVSS 7.5 (high), 2017-01-30: The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows…
- CVE-2016-3751 - CVSS 7.8 (high), 2016-07-11: Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01,…
- CVE-2015-8540 - CVSS 8.8 (high), 2016-04-14: Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and…
- CVE-2015-8472 - CVSS 7.3 (high), 2016-01-21: Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and…
- CVE-2015-7981 - CVSS 5 (medium), 2015-11-24: The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain…
- CVE-2015-8126 - CVSS 7.5 (high), 2015-11-13: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x…
- CVE-2015-0973 - CVSS 8.8 (high), 2015-01-18: Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute…
