CVE-2025-64506
Fixed in a distro release EPSS <1%CVSS 6.1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.
Products: pnggroup libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.20 | libpng | 1.6.53-r0 |
| Alpine 3.21 | libpng | 1.6.53-r0 |
| Alpine 3.22 | libpng | 1.6.51-r0 |
| Alpine 3.23 | libpng | 1.6.51-r0 |
| Alpine 3.24 | libpng | 1.6.51-r0 |
| Amazon Linux 2 | thunderbird | 140.4.0-1.amzn2.0.3 |
| Amazon Linux 2023 | firefox | 140.5.0-1.amzn2023.0.2 |
| Amazon Linux 2023 | libpng | 2:1.6.37-10.amzn2023.0.7 |
| Amazon Linux 2023 | libpng-devel | 2:1.6.37-10.amzn2023.0.7 |
| Amazon Linux 2023 | libpng-static | 2:1.6.37-10.amzn2023.0.7 |
| Amazon Linux 2023 | libpng-tools | 2:1.6.37-10.amzn2023.0.7 |
| Chainguard | libpng | 1.6.51-r0 |
| Debian 11 | libpng1.6 | 1.6.37-3+deb11u1 |
| Debian 12 | libpng1.6 | 1.6.39-2+deb12u1 |
| Debian 13 | libpng1.6 | 1.6.48-1+deb13u1 |
| Debian 14 | libpng1.6 | 1.6.51-1 |
| Red Hat hummingbird 1 | libpng | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-devel | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-devel | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng-static | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng-static | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-tools | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-tools | 0:1.6.56-1.hum1 |
| SUSE Enterprise Storage 7.1 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.2 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.4 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.5 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | libpng16 | 1.6.40-150600.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | libpng16 | 1.6.40-150600.3.3.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 16.0 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | libpng16 | 1.6.8-15.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Linux Micro 6.0 | libpng16 | 1.6.43-2.1 |
| SUSE Linux Micro 6.0 | libpng16 | 1.6.58-1.1 |
| SUSE Linux Micro 6.1 | libpng16 | 1.6.58-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | libpng16 | 1.6.43-slfo.1.1_2.1 |
| SUSE Linux Micro 6.2 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Manager Proxy LTS 4.3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Manager Server LTS 4.3 | libpng16 | 1.6.34-150000.3.12.1 |
| Ubuntu 22.04 LTS | libpng1.6 | 1.6.37-3ubuntu0.1 |
| Ubuntu 24.04 LTS | libpng1.6 | 1.6.43-5ubuntu0.1 |
| Ubuntu 25.10 | libpng1.6 | 1.6.50-1ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm2 |
| Ubuntu Pro 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm1 |
| Ubuntu Pro 20.04 LTS | libpng1.6 | 1.6.37-2ubuntu0.1~esm1 |
| Wolfi | libpng | 1.6.51-r0 |
| openSUSE Leap 15.6 | libpng16 | 1.6.40-150600.3.3.1 |
| openSUSE Leap 16.0 | libpng16 | 1.6.44-160000.3.1 |
| openSUSE Tumbleweed | libpng16 | 1.6.51-1.1 |