CVE-2025-66293highCWE-125

CVE-2025-66293: falha de alta gravidade em pnggroup libpng

LIBPNG has an out-of-bounds read in png_image_read_composite

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar libpng+ Monitorar libpng1.6

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.4%
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Produtos afetados
pnggroup · libpng
CVEs relacionadas — pnggroup libpng

No mesmo produto, das mais perigosas para as menos.

CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 1.1%CVE-2026-33416HIGHLIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`EPSS 1.1%CVE-2026-33636HIGHLIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64EPSS 0.8%CVE-2025-64720HIGHLIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplicationEPSS 0.4%CVE-2025-65018HIGHLIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`EPSS 0.3%CVE-2026-22695MEDIUMLIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)EPSS 0.2%