LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-libpng-staticUpgrade mingw64-libpngUpgrade libpngUpgrade libpng-develUpgrade mingw32-libpngUpgrade mingw64-libpng-static | Mar 3, 2026 | Feb 26, 2026 |
| Alpine Linux | — | Upgrade libpng | Jan 23, 2026 | Jan 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade thunderbird | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libpng-devel-debuginfoUpgrade libpng-staticUpgrade libpng-tools-debuginfoUpgrade firefoxUpgrade libpng-debuginfoUpgrade libpng-debugsourceUpgrade libpng-toolsUpgrade firefox-debuginfoUpgrade libpngUpgrade libpng-develUpgrade firefox-debugsource | Feb 10, 2026 | Jan 12, 2026 |
| Debian | — | Upgrade libpng1.6 | Feb 19, 2026 | Feb 19, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libpng | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libpng | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | May 12, 2026 |
| Oracle_linux | — | Upgrade mingw64-libpngUpgrade mingw32-libpngUpgrade mingw32-libpng-staticUpgrade libpngUpgrade mingw64-libpng-staticUpgrade libpng-devel | Mar 2, 2026 | Jan 12, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Jan 12, 2026 |
| Redhat_linux | — | Upgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-develUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-debugUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-jmods-fastdebugUpgrade libpng-develUpgrade mingw64-libpng-staticUpgrade java-11-openjdk-jmods-debugUpgrade mingw64-libpngUpgrade libpng-devel-debuginfoUpgrade java-11-openjdk-devel-debugNo solution existsUpgrade java-11-openjdk-headless-slowdebugUpgrade libpng-debuginfoUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-src-fastdebugUpgrade java-11-openjdk-debugsourceUpgrade libpngUpgrade java-11-openjdk-src-slowdebugUpgrade mingw32-libpng-staticUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-javadoc-debugUpgrade mingw32-libpng-debuginfoUpgrade java-11-openjdkUpgrade java-11-openjdk-demo-fastdebugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-fastdebugUpgrade libpng-tools-debuginfoUpgrade java-11-openjdk-devel-debuginfoUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-slowdebugUpgrade java-11-openjdk-src-debugUpgrade mingw64-libpng-debuginfoUpgrade java-11-openjdk-devel-slowdebugUpgrade java-11-openjdk-headless-debugUpgrade java-11-openjdk-demoUpgrade libpng-debugsourceUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade mingw32-libpng | Mar 3, 2026 | Jan 12, 2026 |
| Rocky_linux | — | Upgrade libpng-debugsourceUpgrade libpng-devel-debuginfoUpgrade libpng-debuginfoUpgrade libpng-develUpgrade libpng | Mar 2, 2026 | Feb 28, 2026 |
| Suse | — | Upgrade libpng16-16-x86-64-v3Upgrade libpng16-compat-develUpgrade libpng16-compat-devel-32bitUpgrade libpng16-compat-devel-x86-64-v3Upgrade libpng16-16Upgrade libpng16-16-32bitUpgrade libpng16-toolsUpgrade libpng16-devel-x86-64-v3Upgrade libpng16-develUpgrade libpng16-devel-32bit | Jan 23, 2026 | Jan 23, 2026 |
| Ubuntu | — | Upgrade libpng16-16t64Upgrade libpng16-16Upgrade libpng16-16 (Ubuntu Pro) | Jan 15, 2026 | Jan 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub