LI
Product
libpng
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 18Medium 17Low 0
Watch
Add libpng to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14550 | 8.8 | Jul 10 | An issue has been found in third-party PNM decoding associated with libpng 1.6.35 Affected: 1.6.35 |
| CVE-2015-8540 | 8.8 | Apr 14 | Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19,… Affected: 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +34 more |
| CVE-2015-0973 | 8.8 | Jan 18 | Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via… Affected: through 1.5.20; 1.6.0; 1.6.0; 1.6.1; 1.6.1; 1.6.2; +24 more |
| CVE-2014-9495 | 8.8 | Jan 10 | Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers… Affected: through 1.5.20; 1.6.0; 1.6.0; 1.6.1; 1.6.1; 1.6.2; +24 more |
| CVE-2011-3045 | 8.8 | Mar 22 | Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote… Affected: before 1.5.10 |
| CVE-2011-2692 | 8.8 | Jul 17 | The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL… Affected: 1.0.0 before 1.0.55; 1.2.0 before 1.2.45; 1.4.0 before 1.4.8; 1.5.0 before 1.5.4 |
| CVE-2011-2690 | 8.8 | Jul 17 | Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function… Affected: 1.0.0 before 1.0.55; 1.2.0 before 1.2.45; 1.4.0 before 1.4.8; 1.5.0 before 1.5.4 |
| CVE-2026-25646 | 8.1 | Feb 10 | LIBPNG has a heap buffer overflow in png_set_quantize Affected: before 1.6.55 |
| CVE-2026-22801 | 7.8 | Jan 12 | LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* Affected: 1.6.26 before 1.6.54 |
| CVE-2016-3751 | 7.8 | Jul 11 | Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain… Affected: through 1.6.19 |
| CVE-2026-33636 | 7.6 | Mar 26 | LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 Affected: 1.6.36 before 1.6.56 |
| CVE-2026-33416 | 7.5 | Mar 26 | LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` Affected: 1.2.1 before 1.6.56 |
| CVE-2016-10087 | 7.5 | Jan 30 | The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers… Affected: 0.8; 0.71; 0.81; 0.82; 0.85; 0.86; +34 more |
| CVE-2015-8472 | 7.3 | Jan 21 | Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20… Affected: 1.0.64; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +34 more |
| CVE-2026-22695 | 7.1 | Jan 12 | LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) Affected: 1.6.51 before 1.6.54 |
| CVE-2025-66293 | 7.1 | Dec 3 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files Affected: before 1.6.52 |
| CVE-2025-65018 | 7.1 | Nov 25 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files Affected: 1.6.0 before 1.6.51 |
| CVE-2025-64720 | 7.1 | Nov 25 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files Affected: 1.6.0 before 1.6.51 |
Showing 18