CyberSecBulletin

Pnggroup vulnerabilities

We track 8 vulnerabilities in Pnggroup products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.

8vulnerabilities
0critical
8high
0exploited
7.4average CVSS score

Latest Pnggroup vulnerabilities

  • 7.6 High severity

    libpng: Out-of-bounds Read

    CVE-2026-33636Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette

  • 7.5 High severity

    libpng: Use After Free

    CVE-2026-33416PnggroupEPSS 1.09%

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_stru

  • 8.1 High severity

    libpng: Heap-based Buffer Overflow

    CVE-2026-25646PnggroupEPSS 1.12%

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is

  • 7.8 High severity

    libpng: Out-of-bounds Read

    CVE-2026-22801Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit

  • 7.1 High severity

    libpng: Out-of-bounds Read

    CVE-2026-22695Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when

  • 7.1 High severity

    libpng: Out-of-bounds Read

    CVE-2025-66293Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond t

  • 7.1 High severity

    libpng: Heap-based Buffer Overflow

    CVE-2025-65018Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function

  • 7.1 High severity

    libpng: Out-of-bounds Read

    CVE-2025-64720Pnggroup

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when process