Vulnerability index

Browse CVEs

30 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libpng HIGH 7.6
CVE-2026-33636

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versio…

Fix: 1.6.56+
Fix from $1,950 2026-03-26
Libpng HIGH 7.5
CVE-2026-33416

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versio…

Fix: 1.6.56+
Fix from $1,950 2026-03-26
Libpng HIGH 8.1
CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to …

Fix: 1.6.55+
Fix from $1,950 2026-02-10
Libpng MEDIUM 5.5
CVE-2025-28162

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (AS…

Fix: after 1.6.46
Fix from $1,600 2026-01-27
Libpng MEDIUM 5.5
CVE-2025-28164

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.

Fix: after 1.6.46
Fix from $1,600 2026-01-27
Libpng HIGH 7.8
CVE-2026-22801

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.…

Fix: 1.6.54+
Fix from $1,950 2026-01-12
Libpng HIGH 7.1
CVE-2026-22695

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.…

Fix: 1.6.54+
Fix from $1,950 2026-01-12
Libpng HIGH 7.1
CVE-2025-66293

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to …

Fix: 1.6.52+
Fix from $1,950 2025-12-03
Libpng HIGH 7.1
CVE-2025-64720

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers…

Fix: 1.6.51+
Fix from $1,950 2025-11-25
Libpng HIGH 7.1
CVE-2025-65018

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers…

Fix: 1.6.51+
Fix from $1,950 2025-11-25
Libpng MEDIUM 6.1
CVE-2025-64505

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to …

Fix: 1.6.51+
Fix from $1,600 2025-11-25
Libpng MEDIUM 6.1
CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers…

Fix: 1.6.51+
Fix from $1,600 2025-11-25
Libpng CRITICAL 9.8
CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

Fix: 1.6.32+
Fix from $2,300 2019-07-10
Libpng HIGH 8.8
CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in p…

Fix: after 8.0.23
Fix from $1,950 2019-07-10
Libpng MEDIUM 6.5
CVE-2019-6129

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is lib…

No fix yet
Fix from $1,600 2019-01-11
Libpng MEDIUM 6.5
CVE-2018-14048

An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read…

Patch available
Fix from $1,600 2018-07-13
Libpng HIGH 7.5
CVE-2016-10087EPSS 6%

The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allo…

Mitigation only
Fix from $1,950 2017-01-30
Libpng HIGH 7.8
CVE-2016-3751

Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-0…

Fix: after 1.6.19
Fix from $1,950 2016-07-11
Libpng MEDIUM 6.5
CVE-2013-7353

Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause …

Fix: after 1.5.13
Fix from $1,600 2014-05-06
Libpng MEDIUM 6.5
CVE-2013-7354

Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png…

Fix: after 1.5.13
Fix from $1,600 2014-05-06
Libpng MEDIUM 5.0
CVE-2014-0333

The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of …

Patch available
Fix from $1,600 2014-02-27
Libpng MEDIUM 6.5
CVE-2013-6954

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and applicat…

Fix: after 1.6.8
Fix from $1,600 2014-01-12
Libpng HIGH 7.5
CVE-2011-3464

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of …

Mitigation only
Fix from $1,950 2012-07-22
Libpng MEDIUM 6.8
CVE-2011-3048EPSS 7%

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remot…

Mitigation only
Fix from $1,600 2012-05-29
Libpng MEDIUM 5.0
CVE-2009-5063

Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of s…

Fix: after 1.2.38
Fix from $1,600 2011-08-31
Libpng MEDIUM 5.0
CVE-2006-7244

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of servi…

Fix: after 1.2.15
Fix from $1,600 2011-08-31
Libpng MEDIUM 6.8
CVE-2011-0408EPSS 6%

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code v…

Mitigation only
Fix from $1,600 2011-01-18
Libpng HIGH 7.1
CVE-2008-6218

Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a…

Patch available
Fix from $1,950 2009-02-20
Libpng HIGH 7.5
CVE-2008-1382EPSS 6%

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of servic…

Mitigation only
Fix from $1,950 2008-04-14
Libpng MEDIUM 5.0
CVE-2007-5269

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pC…

Fix: after 1.2.20
Fix from $1,600 2007-10-08