Browse CVEs

HIGH 7.6 CVE-2026-33636 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versio… Libpng 1.6.56+ Fix from $1,9502026-03-26 HIGH 7.5 CVE-2026-33416 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versio… Libpng 1.6.56+ Fix from $1,9502026-03-26 HIGH 8.1 CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to … Libpng 1.6.55+ Fix from $1,9502026-02-10 MEDIUM 5.5 CVE-2025-28162 Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (AS… Libpng after 1.6.46 Fix from $1,6002026-01-27 MEDIUM 5.5 CVE-2025-28164 Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function. Libpng after 1.6.46 Fix from $1,6002026-01-27 HIGH 7.8 CVE-2026-22801 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.… Libpng 1.6.54+ Fix from $1,9502026-01-12 HIGH 7.1 CVE-2026-22695 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.… Libpng 1.6.54+ Fix from $1,9502026-01-12 HIGH 7.1 CVE-2025-66293 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to … Libpng 1.6.52+ Fix from $1,9502025-12-03 HIGH 7.1 CVE-2025-64720 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers… Libpng 1.6.51+ Fix from $1,9502025-11-25 HIGH 7.1 CVE-2025-65018 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers… Libpng 1.6.51+ Fix from $1,9502025-11-25 MEDIUM 6.1 CVE-2025-64505 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to … Libpng 1.6.51+ Fix from $1,6002025-11-25 MEDIUM 6.1 CVE-2025-64506 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers… Libpng 1.6.51+ Fix from $1,6002025-11-25 CRITICAL 9.8 CVE-2017-12652 libpng before 1.6.32 does not properly check the length of chunks against the user limit. Libpng 1.6.32+ Fix from $2,3002019-07-10 HIGH 8.8 CVE-2018-14550 An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in p… Libpng after 8.0.23 Fix from $1,9502019-07-10 MEDIUM 6.5 CVE-2019-6129 png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is lib… Libpng No fix yet Fix from $1,6002019-01-11 MEDIUM 6.5 CVE-2018-14048 An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read… Libpng Patch available Fix from $1,6002018-07-13 HIGH 7.5 CVE-2016-10087EPSS 6% The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allo… Libpng Mitigation only Fix from $1,9502017-01-30 HIGH 7.8 CVE-2016-3751 Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-0… Libpng after 1.6.19 Fix from $1,9502016-07-11 MEDIUM 6.5 CVE-2013-7353 Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause … Libpng after 1.5.13 Fix from $1,6002014-05-06 MEDIUM 6.5 CVE-2013-7354 Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png… Libpng after 1.5.13 Fix from $1,6002014-05-06 MEDIUM 5.0 CVE-2014-0333 The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of … Libpng Patch available Fix from $1,6002014-02-27 MEDIUM 6.5 CVE-2013-6954 The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and applicat… Libpng after 1.6.8 Fix from $1,6002014-01-12 HIGH 7.5 CVE-2011-3464 Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of … Libpng Mitigation only Fix from $1,9502012-07-22 MEDIUM 6.8 CVE-2011-3048EPSS 7% The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remot… Libpng Mitigation only Fix from $1,6002012-05-29 MEDIUM 5.0 CVE-2009-5063 Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of s… Libpng after 1.2.38 Fix from $1,6002011-08-31 MEDIUM 5.0 CVE-2006-7244 Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of servi… Libpng after 1.2.15 Fix from $1,6002011-08-31 MEDIUM 6.8 CVE-2011-0408EPSS 6% pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code v… Libpng Mitigation only Fix from $1,6002011-01-18 HIGH 7.1 CVE-2008-6218 Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a… Libpng Patch available Fix from $1,9502009-02-20 HIGH 7.5 CVE-2008-1382EPSS 6% libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of servic… Libpng Mitigation only Fix from $1,9502008-04-14 MEDIUM 5.0 CVE-2007-5269 Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pC… Libpng after 1.2.20 Fix from $1,6002007-10-08