CVE-2025-66293
Fixed in a distro release EPSS <1%CVSS 7.1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.
Products: pnggroup libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | libpng | 2:1.6.40-8.el10_1.1 |
| AlmaLinux 10 | libpng-devel | 2:1.6.40-8.el10_1.1 |
| AlmaLinux 8 | libpng | 2:1.6.34-9.el8_10 |
| AlmaLinux 8 | libpng-devel | 2:1.6.34-9.el8_10 |
| AlmaLinux 8 | mingw32-libpng | 1.6.34-1.el8_10 |
| AlmaLinux 8 | mingw32-libpng-static | 1.6.34-1.el8_10 |
| AlmaLinux 8 | mingw64-libpng | 1.6.34-1.el8_10 |
| AlmaLinux 8 | mingw64-libpng-static | 1.6.34-1.el8_10 |
| AlmaLinux 9 | libpng | 2:1.6.37-12.el9_7.1 |
| AlmaLinux 9 | libpng-devel | 2:1.6.37-12.el9_7.1 |
| Alpine 3.20 | libpng | 1.6.53-r0 |
| Alpine 3.21 | libpng | 1.6.53-r0 |
| Alpine 3.22 | libpng | 1.6.53-r0 |
| Alpine 3.23 | libpng | 1.6.53-r0 |
| Alpine 3.24 | libpng | 1.6.53-r0 |
| Amazon Linux 2 | thunderbird | 140.6.0-1.amzn2.0.1 |
| Amazon Linux 2023 | firefox | 140.6.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | libpng | 2:1.6.37-10.amzn2023.0.8 |
| Amazon Linux 2023 | libpng-devel | 2:1.6.37-10.amzn2023.0.8 |
| Amazon Linux 2023 | libpng-static | 2:1.6.37-10.amzn2023.0.8 |
| Amazon Linux 2023 | libpng-tools | 2:1.6.37-10.amzn2023.0.8 |
| Chainguard | libpng | 1.6.52-r0 |
| Debian 11 | libpng1.6 | 1.6.37-3+deb11u1 |
| Debian 12 | libpng1.6 | 1.6.39-2+deb12u1 |
| Debian 13 | libpng1.6 | 1.6.48-1+deb13u1 |
| Debian 14 | libpng1.6 | 1.6.52-1 |
| Red Hat Enterprise Linux 10.1 | libpng | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 10.1 | libpng-debuginfo | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 10.1 | libpng-debugsource | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 10.1 | libpng-devel | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 10.1 | libpng-devel-debuginfo | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 10.1 | libpng-tools-debuginfo | 2:1.6.40-8.el10_1.1 |
| Red Hat Enterprise Linux 8 | libpng | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | libpng-debuginfo | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | libpng-debugsource | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | libpng-devel | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | libpng-devel-debuginfo | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | libpng-tools-debuginfo | 2:1.6.34-9.el8_10 |
| Red Hat Enterprise Linux 8 | mingw-libpng | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw32-libpng | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw32-libpng-debuginfo | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw32-libpng-static | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw64-libpng | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw64-libpng-debuginfo | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 8 | mingw64-libpng-static | 0:1.6.34-1.el8_10 |
| Red Hat Enterprise Linux 9 | libpng | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux 9 | libpng-debuginfo | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux 9 | libpng-debugsource | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux 9 | libpng-devel | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux 9 | libpng-devel-debuginfo | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux 9 | libpng-tools-debuginfo | 2:1.6.37-12.el9_7.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng | 2:1.6.40-8.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng-debuginfo | 2:1.6.40-8.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng-debugsource | 2:1.6.40-8.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng-devel | 2:1.6.40-8.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng-devel-debuginfo | 2:1.6.40-8.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | libpng-tools-debuginfo | 2:1.6.40-8.el10_0.1 |
| Red Hat hummingbird 1 | libpng | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-devel | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-devel | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng-static | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-static | 0:1.6.56-1.hum1 |
| Red Hat hummingbird 1 | libpng-tools | 0:1.6.58-2.1.hum1 |
| Red Hat hummingbird 1 | libpng-tools | 0:1.6.56-1.hum1 |
| Red Hat rhel aus 8.2 | libpng | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.2 | libpng-debuginfo | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.2 | libpng-debugsource | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.2 | libpng-devel | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.2 | libpng-devel-debuginfo | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.2 | libpng-tools-debuginfo | 2:1.6.34-8.el8_2.1 |
| Red Hat rhel aus 8.4 | libpng | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.4 | libpng-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.4 | libpng-debugsource | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.4 | libpng-devel | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.4 | libpng-devel-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.4 | libpng-tools-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel aus 8.6 | libpng | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel aus 8.6 | libpng-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel aus 8.6 | libpng-debugsource | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel aus 8.6 | libpng-devel | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel aus 8.6 | libpng-devel-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel aus 8.6 | libpng-tools-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng-debugsource | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng-devel | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng-devel-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.6 | libpng-tools-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel e4s 8.8 | libpng | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 8.8 | libpng-debuginfo | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 8.8 | libpng-debugsource | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 8.8 | libpng-devel | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 8.8 | libpng-devel-debuginfo | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 8.8 | libpng-tools-debuginfo | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel e4s 9.0 | libpng | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | libpng-debuginfo | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | libpng-debugsource | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | libpng-devel | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | libpng-devel-debuginfo | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.0 | libpng-tools-debuginfo | 2:1.6.37-12.el9_0.1 |
| Red Hat rhel e4s 9.2 | libpng | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel e4s 9.2 | libpng-debuginfo | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel e4s 9.2 | libpng-debugsource | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel e4s 9.2 | libpng-devel | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel e4s 9.2 | libpng-devel-debuginfo | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel e4s 9.2 | libpng-tools-debuginfo | 2:1.6.37-12.el9_2.1 |
| Red Hat rhel eus 9.4 | libpng | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.4 | libpng-debuginfo | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.4 | libpng-debugsource | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.4 | libpng-devel | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.4 | libpng-devel-debuginfo | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.4 | libpng-tools-debuginfo | 2:1.6.37-12.el9_4.1 |
| Red Hat rhel eus 9.6 | libpng | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus 9.6 | libpng-debuginfo | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus 9.6 | libpng-debugsource | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus 9.6 | libpng-devel | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus 9.6 | libpng-devel-debuginfo | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus 9.6 | libpng-tools-debuginfo | 2:1.6.37-12.el9_6.1 |
| Red Hat rhel eus long life 8.4 | libpng | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel eus long life 8.4 | libpng-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel eus long life 8.4 | libpng-debugsource | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel eus long life 8.4 | libpng-devel | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel eus long life 8.4 | libpng-devel-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel eus long life 8.4 | libpng-tools-debuginfo | 2:1.6.34-8.el8_4.1 |
| Red Hat rhel tus 8.6 | libpng | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.6 | libpng-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.6 | libpng-debugsource | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.6 | libpng-devel | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.6 | libpng-devel-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.6 | libpng-tools-debuginfo | 2:1.6.34-8.el8_6.1 |
| Red Hat rhel tus 8.8 | libpng | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel tus 8.8 | libpng-debuginfo | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel tus 8.8 | libpng-debugsource | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel tus 8.8 | libpng-devel | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel tus 8.8 | libpng-devel-debuginfo | 2:1.6.34-8.el8_8.1 |
| Red Hat rhel tus 8.8 | libpng-tools-debuginfo | 2:1.6.34-8.el8_8.1 |
| Rocky Linux 10 | libpng | 2:1.6.40-8.el10_1.1 |
| Rocky Linux 8 | libpng | 2:1.6.34-9.el8_10 |
| Rocky Linux 8 | mingw-libpng | 0:1.6.34-1.el8_10 |
| Rocky Linux 9 | libpng | 2:1.6.37-12.el9_7.1 |
| SUSE Enterprise Storage 7.1 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.2 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.4 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Micro 5.5 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | libpng16 | 1.6.40-150600.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | libpng16 | 1.6.40-150600.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | libpng16 | 1.6.8-15.12.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server 16.0 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | libpng16 | 1.6.8-15.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Linux Micro 6.0 | libpng16 | 1.6.43-2.1 |
| SUSE Linux Micro 6.0 | libpng16 | 1.6.58-1.1 |
| SUSE Linux Micro 6.1 | libpng16 | 1.6.43-slfo.1.1_2.1 |
| SUSE Linux Micro 6.1 | libpng16 | 1.6.58-slfo.1.1_1.1 |
| SUSE Linux Micro 6.2 | libpng16 | 1.6.44-160000.3.1 |
| SUSE Manager Proxy LTS 4.3 | libpng16 | 1.6.34-150000.3.12.1 |
| SUSE Manager Server LTS 4.3 | libpng16 | 1.6.34-150000.3.12.1 |
| Ubuntu 22.04 LTS | libpng1.6 | 1.6.37-3ubuntu0.3 |
| Ubuntu 24.04 LTS | libpng1.6 | 1.6.43-5ubuntu0.3 |
| Ubuntu 25.10 | libpng1.6 | 1.6.50-1ubuntu0.3 |
| Ubuntu Pro 16.04 LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm3 |
| Ubuntu Pro 18.04 LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm2 |
| Ubuntu Pro 20.04 LTS | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 |
| Wolfi | libpng | 1.6.52-r0 |
| openSUSE Leap 15.6 | libpng16 | 1.6.40-150600.3.3.1 |
| openSUSE Leap 16.0 | libpng16 | 1.6.44-160000.3.1 |
| openSUSE Tumbleweed | libpng16 | 1.6.52-1.1 |