The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-netscape-communicator-linuxUpgrade linux-netscape-navigatorUpgrade ja-netscape-navigator-linuxUpgrade firefoxUpgrade netscape-navigatorUpgrade netscape7Upgrade ko-netscape-communicator-linuxUpgrade mozillaUpgrade thunderbirdUpgrade linux-mozilla-develUpgrade pt_BR-netscape7Upgrade pngUpgrade netscape-communicatorUpgrade linux-pngUpgrade ja-netscape7Upgrade de-netscape7Upgrade mozilla-gtk1Upgrade linux-netscape-communicatorUpgrade linux-mozillaUpgrade ko-netscape-navigator-linuxUpgrade fr-netscape7 | Dec 10, 2025 | Aug 4, 2004 |
| Gentoo Linux | — | Upgrade www-client/epiphany.Upgrade www-client/mozilla-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/galeon.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade media-libs/libpng.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla. | Oct 30, 2017 | Nov 23, 2004 |
| Suse | — | Upgrade libpng-64bitUpgrade libpng-32bitUpgrade libpngUpgrade libpng-x86 | Feb 17, 2015 | Nov 23, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub