Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-65018

Опубликовано: 27 нояб. 2025
Источник: msrc
CVSS3: 7.1
EPSS Низкий

Описание

LIBPNG is vulnerable to a heap buffer overflow in png_combine_row triggered via png_image_finish_read

EPSS

Процентиль: 7%
0.00027
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
26 дней назад

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.

CVSS3: 7.1
nvd
26 дней назад

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.

CVSS3: 7.1
debian
26 дней назад

LIBPNG is a reference library for use in applications that read, creat ...

CVSS3: 7.1
fstec
27 дней назад

Уязвимость функции png_image_finish_read() библиотеки для работы с растровой графикой в формате PNG libpng, позволяющая нарушителю выполнить произвольный код

suse-cvrf
4 дня назад

Security update for libpng16

EPSS

Процентиль: 7%
0.00027
Низкий

7.1 High

CVSS3