LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-libpngUpgrade libpngUpgrade mingw32-libpng-staticUpgrade mingw32-libpngUpgrade libpng-develUpgrade mingw64-libpng-static | Jan 8, 2026 | Jan 6, 2026 |
| Alpine Linux | — | Upgrade libpng | Dec 9, 2025 | Dec 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade thunderbird | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libpng-tools-debuginfoUpgrade firefox-debuginfoUpgrade libpng-debugsourceUpgrade libpng-develUpgrade libpng-staticUpgrade libpng-devel-debuginfoUpgrade firefoxUpgrade libpng-toolsUpgrade libpngUpgrade firefox-debugsourceUpgrade libpng-debuginfo | Jan 12, 2026 | Dec 3, 2025 |
| Debian | — | Upgrade libpng1.6 | Dec 8, 2025 | Dec 8, 2025 |
| Freebsd | — | Upgrade png | Dec 10, 2025 | Dec 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libpng | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade mingw32-libpng-staticUpgrade mingw64-libpng-staticUpgrade mingw64-libpngUpgrade mingw32-libpngUpgrade libpngUpgrade libpng-devel | Jan 9, 2026 | Dec 3, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Dec 3, 2025 |
| Redhat_linux | — | Upgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-src-fastdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade mingw64-libpngUpgrade mingw32-libpng-debuginfoUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-javadoc-zipNo solution existsUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-debugUpgrade libpngUpgrade java-11-openjdk-devel-debugUpgrade libpng-devel-debuginfoUpgrade libpng-develUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-demo-fastdebugUpgrade mingw32-libpngUpgrade java-11-openjdk-src-debugUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-devel-slowdebugUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-jmods-fastdebugUpgrade libpng-tools-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-devel-debuginfoUpgrade mingw64-libpng-staticUpgrade libpng-debuginfoUpgrade java-11-openjdk-jmods-debugUpgrade mingw64-libpng-debuginfoUpgrade java-11-openjdk-develUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-headless-debugUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-slowdebugUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdkUpgrade mingw32-libpng-staticUpgrade libpng-debugsourceUpgrade java-11-openjdk-fastdebugUpgrade java-11-openjdk-javadoc-debug | Jan 7, 2026 | Dec 3, 2025 |
| Rocky_linux | — | Upgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-demo-fastdebugUpgrade libpng-devel-debuginfoUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade libpng-debugsourceUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-debuginfoUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-static-libsUpgrade libpng-debuginfoUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-demoUpgrade libpngUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdkUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-src-slowdebugUpgrade libpng-develUpgrade java-17-openjdk-develUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-headless-debuginfoUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-devel-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-headless-fastdebug | Jan 12, 2026 | Jan 9, 2026 |
| Ubuntu | — | Upgrade libpng16-16t64Upgrade libpng16-16Upgrade libpng16-16 (Ubuntu Pro) | Jan 15, 2026 | Dec 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub