Priority HIGH 69
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
RHSA-2026:6732
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images libpng-1.6.56-1.hum1@aarch64, libpng-1.6.56-1.hum1@src, libpng-1.6.56-1.hum1@x86_64 +6
Fixes 13 records
TI-2025-40204 CVE-2025-65018
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
Priority HIGH 66
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2025-40066 CVE-2025-64720
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2025-20736 CVE-2025-28164 · GHSA-gjxw-mrg7-952f
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a…
Priority MEDIUM 58
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.
TI-2025-20735 CVE-2025-28162 · GHSA-h77p-hrmm-5v85
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a…
Priority MEDIUM 58
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading…
TI-2026-03204 CVE-2026-3713 · GHSA-fgc7-hpwc-cmc9
pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow
Priority MEDIUM 55
A flaw has been found in pnggroup libpng up to 1.6.55.
TI-2026-25813 CVE-2026-33416
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
Priority LOW 37
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
Priority LOW 35
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2026-18319 CVE-2026-22801
LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
Priority LOW 33
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2026-18222 CVE-2026-22695
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
Priority LOW 31
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2025-39897 CVE-2025-64505
LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
Priority LOW 27
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2025-39898 CVE-2025-64506
LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
Priority LOW 26
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.