CVE-2025-66293
High · 7.1CVSS
7.1
EPSS
0.4%
Published
Dec 3, 2025
CISA due date
—
The record
LIBPNG has an out-of-bounds read in png_image_read_composite
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | libpng | 0 | 2:1.6.40-8.el10_1.1 |
| AlmaLinux:10 | libpng-devel | 0 | 2:1.6.40-8.el10_1.1 |
| AlmaLinux:8 | libpng | 0 | 2:1.6.34-9.el8_10 |
| AlmaLinux:8 | libpng-devel | 0 | 2:1.6.34-9.el8_10 |
| AlmaLinux:8 | mingw32-libpng | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw32-libpng-static | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw64-libpng | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:8 | mingw64-libpng-static | 0 | 1.6.34-1.el8_10 |
| AlmaLinux:9 | libpng | 0 | 2:1.6.37-12.el9_7.1 |
| AlmaLinux:9 | libpng-devel | 0 | 2:1.6.37-12.el9_7.1 |
| Mageia:9 | libpng | 0 | 1.6.38-1.2.mga9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | libpng16 | 0 | 1.6.8-15.12.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | libpng16 | 0 | 1.6.8-15.12.1 |
| openSUSE:Leap 15.6 | libpng16 | 0 | 1.6.40-150600.3.3.1 |
| openSUSE:Leap 16.0 | libpng16 | 0 | 1.6.44-160000.3.1 |
| openSUSE:Tumbleweed | libpng16 | 0 | 1.6.52-1.1 |
Related vulnerabilities
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects libpng
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect… Also affects libpng
- CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate… Also affects libpng
- CVE-2026-22801 LIBPNG is a reference library for use in applications that read, create, and manipulate… Also affects libpng
- CVE-2026-22695 LIBPNG is a reference library for use in applications that read, create, and manipulate… Also affects libpng
- CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with… Also affects libpng
- CVE-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette… Also affects libpng
- CVE-2026-33636 LIBPNG is a reference library for use in applications that read, create, and manipulate… Also affects libpng16