Login Request a demo
PN
Vendor
pnggroup
2 products with CVEs on record
60
CVEs
0
On KEV
0
New 30D
Products
LI
libpng
pnggroup
9.8
58 CVEs0 on KEV0 new
PN
Pngcheck
Libpng
7.8
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-34757
LI
Libpng
Libpng
4.4
0%
Apr 9LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure
CVE-2026-33636
LI
Libpng
Libpng
7.6
1%
Mar 26LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
CVE-2026-33416
LI
Libpng
Libpng
7.5
1%
Mar 26LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
CVE-2026-3713
LI
libpng
pnggroup
5.3
0%
Mar 8pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow
CVE-2026-25646
LI
Libpng
Libpng
8.1
1%
Feb 10LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-28164
LI
Libpng
Libpng
5.5
0%
Jan 27Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function
CVE-2025-28162
LI
Libpng
Libpng
5.5
0%
Jan 27Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory…
CVE-2026-22801
LI
Libpng
Libpng
7.8
0%
Jan 12LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2026-22695
LI
Libpng
Libpng
7.1
0%
Jan 12LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-66293
LI
Libpng
Libpng
7.1
0%
Dec 3LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-65018
LI
Libpng
Libpng
7.1
0%
Nov 25LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-64720
LI
Libpng
Libpng
7.1
0%
Nov 25LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-64506
LI
Libpng
Libpng
6.1
0%
Nov 25LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2025-64505
LI
Libpng
Libpng
6.1
0%
Nov 25LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files
CVE-2021-4214
LI
Libpng
Libpng
5.5
1%
Aug 24A heap overflow flaw was found in libpngs' pngimage.c program
CVE-2020-35511
PN
Pngcheck
Libpng
7.8
0%
Aug 23A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file
CVE-2020-27818
PN
Pngcheck
Libpng
3.3
1%
Dec 8A flaw was found in the check_chunk_name() function of pngcheck-2.4.0
CVE-2017-12652
LI
Libpng
Libpng
9.8
4%
Jul 10libpng before 1.6.32 does not properly check the length of chunks against the user limit
CVE-2018-14550
LI
Libpng
Libpng
8.8
4%
Jul 10An issue has been found in third-party PNM decoding associated with libpng 1.6.35
CVE-2019-7317
LI
Libpng
Libpng
5.3
9%
Feb 4png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
CVE-2019-6129
LI
Libpng
Libpng
6.5
2%
Jan 11png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp
CVE-2018-14048
LI
Libpng
Libpng
6.5
3%
Jul 13An issue has been found in libpng 1.6.34
CVE-2018-13785
LI
Libpng
Libpng
6.5
4%
Jul 9In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while…
CVE-2016-10087
LI
Libpng
Libpng
7.5
5%
Jan 30The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers…
CVE-2016-3751
LI
Libpng
Libpng
7.8
0%
Jul 11Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain…
CVE-2015-8540
LI
Libpng
Libpng
8.8
6%
Apr 14Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19,…
CVE-2015-8472
LI
Libpng
Libpng
7.3
6%
Jan 21Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20…
CVE-2015-7981
LI
Libpng
Libpng
–
6%
Nov 24The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory…
CVE-2015-8126
LI
Libpng
Libpng
–
10%
Nov 13Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x…
CVE-2015-0973
LI
Libpng
Libpng
8.8
4%
Jan 18Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via…
CVE-2014-9495
LI
Libpng
Libpng
8.8
4%
Jan 10Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers…
CVE-2013-7354
LI
Libpng
Libpng
6.5
2%
May 6Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2)…
CVE-2013-7353
LI
Libpng
Libpng
6.5
2%
May 6Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service…
CVE-2014-0333
LI
Libpng
Libpng
–
3%
Feb 27The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU…
CVE-2013-6954
LI
Libpng
Libpng
6.5
5%
Jan 12The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE…
CVE-2012-3425
LI
Libpng
Libpng
–
3%
Aug 13The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a…
CVE-2011-3464
LI
Libpng
Libpng
–
3%
Jul 22Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash)…
CVE-2011-3048
LI
Libpng
Libpng
–
7%
May 29The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial…
CVE-2011-3045
LI
Libpng
Libpng
8.8
4%
Mar 22Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote…
CVE-2009-5063
LI
Libpng
Libpng
–
1%
Aug 31Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or…
CVE-2006-7244
LI
Libpng
Libpng
–
1%
Aug 31Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or…
CVE-2011-2692
LI
Libpng
Libpng
8.8
4%
Jul 17The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL…
CVE-2011-2691
LI
Libpng
Libpng
6.5
4%
Jul 17The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer…
CVE-2011-2690
LI
Libpng
Libpng
8.8
3%
Jul 17Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function…
CVE-2011-2501
LI
Libpng
Libpng
6.5
3%
Jul 17The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a…
CVE-2011-0408
LI
Libpng
Libpng
–
6%
Jan 18pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG…
CVE-2010-2249
LI
Libpng
Libpng
6.5
3%
Jun 30Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a…
CVE-2010-1205
LI
Libpng
Libpng
9.8
43%
Jun 30Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
CVE-2010-0205
LI
Libpng
Libpng
–
4%
Mar 3The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data…
CVE-2009-2042
LI
Libpng
Libpng
–
2%
Jun 12libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain…
CVE-2009-0040
LI
Libpng
Libpng
–
5%
Feb 22The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of…
CVE-2008-6218
LI
Libpng
Libpng
–
2%
Feb 20Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory…
CVE-2008-5907
LI
Libpng
Libpng
–
3%
Jan 15The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory…
CVE-2008-3964
LI
Libpng
Libpng
–
3%
Sep 11Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified…
CVE-2008-1382
LI
Libpng
Libpng
–
6%
Apr 14libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute…
CVE-2007-5266
LI
Libpng
Libpng
–
3%
Oct 8Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to…
CVE-2007-5269
LI
Libpng
Libpng
–
5%
Oct 8Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL…
CVE-2007-5268
LI
Libpng
Libpng
–
3%
Oct 8pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause…
CVE-2007-5267
LI
Libpng
Libpng
–
2%
Oct 8Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash)…
CVE-2004-0421
LI
Libpng
Libpng
–
4%
Aug 18The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that…