Skip to content
Noroxi

libpng records

59 published records for vendor libpng.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
9
With a fix record
84.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

59 records
  • CVE-2010-1205
    52Plan

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attack

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    libpng · libpngJun 30, 2010

  • CVE-2017-12652
    40Plan

    libpng before 1.6.32 does not properly check the length of chunks against the user limit.

    CriticalCVSS 9.8No exploitEPSS 4%

    libpng · libpngJul 10, 2019

  • CVE-2015-8540
    37Monitor

    Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1

    HighCVSS 8.8No exploitEPSS 6%

    libpng · libpngApr 14, 2016

  • CVE-2011-2692
    36Monitor

    The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 do

    HighCVSS 8.8No exploitEPSS 4%

    libpng · libpngJul 17, 2011

  • CVE-2015-0973
    36Monitor

    Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent at

    HighCVSS 8.8No exploitEPSS 4%

    libpng · libpngJan 18, 2015

  • CVE-2014-9495
    36Monitor

    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems,

    HighCVSS 8.8Proof of conceptEPSS 4%

    libpng · libpngJan 10, 2015

  • CVE-2018-14550
    36Monitor

    An issue has been found in third-party PNM decoding associated with libpng 1.6.35.

    HighCVSS 8.8No exploitEPSS 3%

    libpng · libpngJul 10, 2019

  • CVE-2011-3045
    36Monitor

    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.8

    HighCVSS 8.8No exploitEPSS 3%

    google · chromeMar 22, 2012

  • CVE-2011-2690
    36Monitor

    Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application

    HighCVSS 8.8No exploitEPSS 3%

    libpng · libpngJul 17, 2011

  • CVE-2015-8126
    33Monitor

    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3

    HighCVSS 7.5No exploitEPSS 10%

    libpng · libpngNov 13, 2015

  • CVE-2026-25646
    33Monitor

    LIBPNG has a heap buffer overflow in png_set_quantize

    HighCVSS 8.3No exploitEPSS 1%

    libpng · libpngFeb 10, 2026

  • CVE-2008-1382
    32Monitor

    libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial

    HighCVSS 7.5No exploitEPSS 5%

    libpng · libpngApr 14, 2008

  • CVE-2016-10087
    32Monitor

    The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.

    HighCVSS 7.5No exploitEPSS 5%

    libpng · libpngJan 30, 2017

  • CVE-2015-8472
    31Monitor

    Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x befor

    HighCVSS 7.3No exploitEPSS 6%

    libpng · libpngJan 21, 2016

  • CVE-2011-3464
    31Monitor

    Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a d

    HighCVSS 7.5No exploitEPSS 3%

    libpng · libpngJul 22, 2012

  • CVE-2016-3751
    31Monitor

    Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo

    HighCVSS 7.8No exploitEPSS 0%

    libpng · libpngJul 10, 2016

  • CVE-2020-35511
    31Monitor

    A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.

    HighCVSS 7.8No exploitEPSS 0%

    libpng · pngcheckAug 23, 2022

  • CVE-2026-22801
    31Monitor

    LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

    HighCVSS 7.8No exploitEPSS 0%

    libpng · libpngJan 12, 2026

  • CVE-2026-33416
    30Monitor

    LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`

    HighCVSS 7.5No exploitEPSS 1%

    libpng · libpngMar 26, 2026

  • CVE-2026-33636
    30Monitor

    LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

    HighCVSS 7.6No exploitEPSS 0%

    libpng · libpngMar 26, 2026

  • CVE-2011-3048
    29Monitor

    The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 all

    MediumCVSS 6.8No exploitEPSS 6%

    libpng · libpngMay 29, 2012

  • CVE-2011-0408
    29Monitor

    pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitra

    MediumCVSS 6.8No exploitEPSS 5%

    libpng · libpngJan 18, 2011

  • CVE-2008-6218
    29Monitor

    Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers t

    HighCVSS 7.1No exploitEPSS 2%

    libpng · libpngFeb 20, 2009

  • CVE-2009-0040
    28Monitor

    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-de

    MediumCVSS 6.8No exploitEPSS 4%

    libpng · libpngFeb 22, 2009

  • CVE-2025-64720
    28Monitor

    LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

    HighCVSS 7.1Proof of conceptEPSS 0%

    libpng · libpngNov 25, 2025