LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-libpngUpgrade libpngUpgrade mingw32-libpng-staticUpgrade mingw32-libpngUpgrade mingw64-libpng-staticUpgrade libpng-devel | Jan 8, 2026 | Jan 6, 2026 |
| Alpine Linux | — | Upgrade libpng | Dec 9, 2025 | Dec 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade firefox | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade firefox-debuginfoUpgrade libpng-tools-debuginfoUpgrade libpng-debugsourceUpgrade libpngUpgrade libpng-debuginfoUpgrade firefox-debugsourceUpgrade libpng-develUpgrade libpng-staticUpgrade libpng-devel-debuginfoUpgrade firefoxUpgrade libpng-tools | Jan 12, 2026 | Dec 3, 2025 |
| Debian | — | Upgrade libpng1.6 | Dec 8, 2025 | Dec 8, 2025 |
| Freebsd | — | Upgrade png | Dec 10, 2025 | Dec 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libpng | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libpng | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade mingw32-libpng-staticUpgrade libpng-develUpgrade libpngUpgrade mingw32-libpngUpgrade mingw64-libpngUpgrade mingw64-libpng-static | Jan 9, 2026 | Dec 3, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Dec 3, 2025 |
| Redhat_linux | — | Upgrade java-11-openjdk-javadoc-debugUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade libpng-debugsourceUpgrade java-11-openjdk-headless-debugUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdkUpgrade java-11-openjdk-headless-debuginfoUpgrade mingw64-libpng-staticUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-slowdebugUpgrade libpng-debuginfoUpgrade java-11-openjdk-jmods-debugUpgrade java-11-openjdk-devel-debuginfoUpgrade mingw32-libpng-staticUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-fastdebugUpgrade java-11-openjdk-develUpgrade java-11-openjdk-srcUpgrade mingw64-libpng-debuginfoUpgrade libpng-tools-debuginfoUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-javadoc-zip-debugUpgrade mingw64-libpngUpgrade java-11-openjdk-src-debugUpgrade mingw32-libpngUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-src-fastdebugUpgrade java-11-openjdk-jmodsUpgrade libpng-devel-debuginfoUpgrade java-11-openjdk-debugUpgrade java-11-openjdk-devel-debugUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-static-libsUpgrade libpngUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-demo-fastdebugUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-headless-fastdebugUpgrade mingw32-libpng-debuginfoUpgrade libpng-develUpgrade java-11-openjdk-javadocNo solution existsUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-devel-slowdebug | Jan 7, 2026 | Dec 3, 2025 |
| Rocky_linux | — | Upgrade java-17-openjdk-develUpgrade java-17-openjdk-headless-debuginfoUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade libpng-develUpgrade java-17-openjdk-devel-debuginfoUpgrade java-17-openjdk-devel-fastdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-jmodsUpgrade libpng-debuginfoUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade libpng-debugsourceUpgrade java-17-openjdkUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-demoUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-static-libsUpgrade java-17-openjdk-debuginfoUpgrade java-17-openjdk-src-fastdebugUpgrade libpngUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade libpng-devel-debuginfoUpgrade java-17-openjdk-demo-fastdebug | Jan 12, 2026 | Jan 9, 2026 |
| Ubuntu | — | Upgrade libpng16-16Upgrade libpng16-16t64Upgrade libpng16-16 (Ubuntu Pro) | Jan 15, 2026 | Dec 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub