The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-libpngUpgrade libpngUpgrade libpng-develUpgrade mingw32-libpngUpgrade mingw32-libpng-staticUpgrade mingw64-libpng-static | Mar 3, 2026 | Feb 26, 2026 |
| Alpine Linux | — | Upgrade libpng | Jan 23, 2026 | Jan 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade firefox | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libpng-debugsourceUpgrade libpng-develUpgrade libpngUpgrade firefox-debuginfoUpgrade libpng-devel-debuginfoUpgrade firefox-debugsourceUpgrade firefoxUpgrade libpng-tools-debuginfoUpgrade libpng-toolsUpgrade libpng-staticUpgrade libpng-debuginfo | Feb 10, 2026 | Jan 12, 2026 |
| Debian | — | Upgrade libpng1.6 | Feb 19, 2026 | Feb 19, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libpng | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libpng | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | May 12, 2026 |
| Oracle_linux | — | Upgrade mingw64-libpng-staticUpgrade libpng-develUpgrade mingw32-libpngUpgrade libpngUpgrade mingw64-libpngUpgrade mingw32-libpng-static | Mar 2, 2026 | Jan 12, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | Jan 12, 2026 |
| Redhat_linux | — | Upgrade java-11-openjdkUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-javadoc-debugUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-src-debugUpgrade java-11-openjdk-devel-debuginfoUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-debugUpgrade mingw64-libpngUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-11-openjdk-fastdebugUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-headless-slowdebug-debuginfoNo solution existsUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-demo-fastdebugUpgrade java-11-openjdk-devel-debugUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-slowdebugUpgrade libpng-debugsourceUpgrade java-11-openjdk-slowdebugUpgrade mingw64-libpng-staticUpgrade java-11-openjdk-debugsourceUpgrade mingw32-libpng-staticUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade libpng-tools-debuginfoUpgrade java-11-openjdk-develUpgrade java-11-openjdk-src-fastdebugUpgrade libpng-devel-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-jmods-fastdebugUpgrade libpng-develUpgrade java-11-openjdk-jmods-debugUpgrade libpng-debuginfoUpgrade mingw32-libpng-debuginfoUpgrade java-11-openjdk-headless-debugUpgrade mingw64-libpng-debuginfoUpgrade mingw32-libpngUpgrade libpngUpgrade java-11-openjdk-jmods | Mar 3, 2026 | Jan 12, 2026 |
| Rocky_linux | — | Upgrade libpng-debugsourceUpgrade libpng-debuginfoUpgrade libpng-devel-debuginfoUpgrade libpngUpgrade libpng-devel | Mar 2, 2026 | Feb 28, 2026 |
| Suse | — | Upgrade libpng16-compat-devel-32bitUpgrade libpng16-toolsUpgrade libpng16-develUpgrade libpng16-compat-develUpgrade libpng16-16Upgrade libpng16-16-x86-64-v3Upgrade libpng16-devel-x86-64-v3Upgrade libpng16-compat-devel-x86-64-v3Upgrade libpng16-16-32bitUpgrade libpng16-devel-32bit | Jan 22, 2026 | Jan 21, 2026 |
| Ubuntu | — | Upgrade libpng16-16 (Ubuntu Pro)Upgrade libpng16-16t64Upgrade libpng16-16 | Jan 15, 2026 | Jan 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 12, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub