Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade pngUpgrade fr-netscape7Upgrade ko-netscape-navigator-linuxUpgrade linux-netscape-communicatorUpgrade mozilla-gtk1Upgrade de-netscape7Upgrade linux-pngUpgrade linux-mozillaUpgrade netscape-communicatorUpgrade ja-netscape7Upgrade pt_BR-netscape7Upgrade ja-netscape-navigator-linuxUpgrade linux-netscape-navigatorUpgrade netscape-navigatorUpgrade thunderbirdUpgrade mozillaUpgrade ja-netscape-communicator-linuxUpgrade ko-netscape-communicator-linuxUpgrade linux-mozilla-develUpgrade firefoxUpgrade netscape7 | Dec 10, 2025 | Aug 4, 2004 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/galeon.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade media-libs/libpng.Upgrade www-client/mozilla.Upgrade www-client/mozilla-bin.Upgrade www-client/epiphany. | Oct 30, 2017 | Nov 23, 2004 |
| Suse | — | Upgrade libpng-x86Upgrade libpngUpgrade libpng-32bitUpgrade libpng-64bit | Feb 17, 2015 | Nov 23, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub