CVE-2025-64720
High · 7.1CVSS
7.1
EPSS
0.4%
Published
Nov 24, 2025
CISA due date
—
The record
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | java-21-openjdk | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.10.0.7-1.el10.alma.1 |
| AlmaLinux:10 | java-25-openjdk | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-demo | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-demo-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-demo-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-devel | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-devel-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-devel-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-headless | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-headless-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-headless-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-javadoc | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-javadoc-zip | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-jmods | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-jmods-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-jmods-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-src | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-src-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-src-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-static-libs | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-static-libs-fastdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | java-25-openjdk-static-libs-slowdebug | 0 | 1:25.0.2.0.10-1.el10 |
| AlmaLinux:10 | libpng | 0 | 2:1.6.40-8.el10_1.1 |
| AlmaLinux:10 | libpng-devel | 0 | 2:1.6.40-8.el10_1.1 |
| AlmaLinux:8 | java-1.8.0-openjdk | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.482.b08-1.el8 |
| AlmaLinux:8 | java-17-openjdk | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-demo | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-devel | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-headless | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-src | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.18.0.8-1.el8 |
| AlmaLinux:8 | libpng | 0 | 2:1.6.34-9.el8_10 |
| AlmaLinux:8 | libpng-devel | 0 | 2:1.6.34-9.el8_10 |
| AlmaLinux:8 | mingw32-libpng | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw32-libpng-static | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw64-libpng | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw64-libpng-static | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:9 | java-21-openjdk | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-demo | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-devel | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-headless | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-javadoc | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-jmods | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-src | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-static-libs | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.10.0.7-1.el9.alma.1 |
| AlmaLinux:9 | libpng | 0 | 2:1.6.37-12.el9_7.1 |
| AlmaLinux:9 | libpng-devel | 0 | 2:1.6.37-12.el9_7.1 |
| Mageia:9 | java-1.8.0-openjdk | 0 | 1.8.0.482.b08-1.mga9 |
| Mageia:9 | java-11-openjdk | 0 | 11.0.30.0.7-1.mga9 |
| Mageia:9 | java-17-openjdk | 0 | 17.0.18.0.8-1.mga9 |
| Mageia:9 | java-latest-openjdk | 0 | 25.0.2.0.10-1.rolling.1.mga9 |
| Mageia:9 | libpng | 0 | 1.6.38-1.1.mga9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | libpng16 | 0 | 1.6.8-15.9.1 |
| openSUSE:Leap 15.6 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| openSUSE:Leap 16.0 | libpng16 | 0 | 1.6.44-160000.3.1 |
| openSUSE:Tumbleweed | libpng16 | 0 | 1.6.51-1.1 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects java-21-openjdk
- CVE-2025-66293 LIBPNG has an out-of-bounds read in png_image_read_composite Also affects libpng
- CVE-2024-21147 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2024-21145 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2024-21140 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk