Поиск уязвимостей
Количество 66
Количество 66
ROS-20260401-73-0005
Уязвимость libpng15
ROS-20260401-73-0004
Уязвимость libpng12
ROS-20260401-73-0003
Уязвимость libpng
BDU:2026-04960
Уязвимость функций png_write_image_16bit() и png_write_image_8bit() библиотеки для работы с растровой графикой в формате PNG Libpng, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2026-22695
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
CVE-2026-22695
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
CVE-2026-22695
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
CVE-2026-22695
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
CVE-2026-22695
LIBPNG is a reference library for use in applications that read, creat ...
CVE-2026-25646
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.
CVE-2026-25646
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.
CVE-2026-25646
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.
CVE-2026-25646
LIBPNG is a reference library for use in applications that read, creat ...
SUSE-SU-2026:0192-1
Security update for libpng16
BDU:2026-01048
Уязвимость функции png_image_read_direct_scaled() библиотеки libpng, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
SUSE-SU-2026:3039-1
Security update for libpng12
SUSE-SU-2026:2878-1
Security update for libpng15
SUSE-SU-2026:0599-1
Security update for libpng12
SUSE-SU-2026:0598-1
Security update for libpng12
SUSE-SU-2026:0597-1
Security update for libpng16
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
ROS-20260401-73-0005 Уязвимость libpng15 | CVSS3: 7.8 | 0% Низкий | 7 месяцев назад | |
ROS-20260401-73-0004 Уязвимость libpng12 | CVSS3: 7.8 | 0% Низкий | 7 месяцев назад | |
ROS-20260401-73-0003 Уязвимость libpng | CVSS3: 7.8 | 0% Низкий | 7 месяцев назад | |
BDU:2026-04960 Уязвимость функций png_write_image_16bit() и png_write_image_8bit() библиотеки для работы с растровой графикой в формате PNG Libpng, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.8 | 0% Низкий | 10 месяцев назад | |
CVE-2026-22695 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54. | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад | |
CVE-2026-22695 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54. | CVSS3: 6.1 | 0% Низкий | 10 месяцев назад | |
CVE-2026-22695 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54. | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад | |
CVE-2026-22695 LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) | CVSS3: 6.1 | 0% Низкий | 10 месяцев назад | |
CVE-2026-22695 LIBPNG is a reference library for use in applications that read, creat ... | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад | |
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55. | CVSS3: 8.1 | 1% Низкий | 9 месяцев назад | |
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55. | CVSS3: 7 | 1% Низкий | 9 месяцев назад | |
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55. | CVSS3: 8.1 | 1% Низкий | 9 месяцев назад | |
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, creat ... | CVSS3: 8.1 | 1% Низкий | 9 месяцев назад | |
SUSE-SU-2026:0192-1 Security update for libpng16 | 0% Низкий | 10 месяцев назад | ||
BDU:2026-01048 Уязвимость функции png_image_read_direct_scaled() библиотеки libpng, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании | CVSS3: 7.1 | 0% Низкий | 12 месяцев назад | |
SUSE-SU-2026:3039-1 Security update for libpng12 | 1% Низкий | 4 месяца назад | ||
SUSE-SU-2026:2878-1 Security update for libpng15 | 1% Низкий | 4 месяца назад | ||
SUSE-SU-2026:0599-1 Security update for libpng12 | 1% Низкий | 9 месяцев назад | ||
SUSE-SU-2026:0598-1 Security update for libpng12 | 1% Низкий | 9 месяцев назад | ||
SUSE-SU-2026:0597-1 Security update for libpng16 | 1% Низкий | 9 месяцев назад |
Уязвимостей на страницу