LI
Product
libpng
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 18Medium 17Low 0
Watch
Add libpng to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6129 | 6.5 | Jan 11 | png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp Affected: 1.6.36 |
| CVE-2018-14048 | 6.5 | Jul 13 | An issue has been found in libpng 1.6.34 Affected: 1.6.34 |
| CVE-2018-13785 | 6.5 | Jul 9 | In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while… Affected: 1.6.34 |
| CVE-2013-7354 | 6.5 | May 6 | Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2)… Affected: through 1.5.13; 1.5.0; 1.5.1; 1.5.1; 1.5.2; 1.5.2; +18 more |
| CVE-2013-7353 | 6.5 | May 6 | Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service… Affected: through 1.5.13; 1.5.0; 1.5.1; 1.5.1; 1.5.2; 1.5.2; +18 more |
| CVE-2013-6954 | 6.5 | Jan 12 | The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE… Affected: through 1.6.8; 1.6.0; 1.6.0; 1.6.1; 1.6.1; 1.6.2; +9 more |
| CVE-2011-2691 | 6.5 | Jul 17 | The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer… Affected: 1.0.0 before 1.0.55; 1.2.0 before 1.2.45; 1.4.0 before 1.4.8; 1.5.0 before 1.5.4 |
| CVE-2011-2501 | 6.5 | Jul 17 | The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a… Affected: 1.0.0 before 1.0.55; 1.2.0 before 1.2.45; 1.4.0 before 1.4.8; 1.5.0 before 1.5.4 |
| CVE-2010-2249 | 6.5 | Jun 30 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a… Affected: before 1.2.44; 1.4.0 before 1.4.3 |
| CVE-2025-64506 | 6.1 | Nov 24 | LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images Affected: 1.6.0 before 1.6.51 |
| CVE-2025-64505 | 6.1 | Nov 24 | LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index Affected: before 1.6.51 |
| CVE-2025-28164 | 5.5 | Jan 27 | Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function Affected: 1.6.43 through 1.6.46 |
| CVE-2025-28162 | 5.5 | Jan 27 | Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory… Affected: 1.6.43 through 1.6.46 |
| CVE-2021-4214 | 5.5 | Aug 24 | A heap overflow flaw was found in libpngs' pngimage.c program Affected: 1.6.0 |
| CVE-2026-3713 | 5.3 | Mar 8 | pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +34 more |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 1.6.0 before 1.6.37 |
| CVE-2026-34757 | 4.4 | Apr 9 | LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure Affected: 1.0.9 before 1.6.57 |
Showing 17