CVE-2025-64506

Published Nov 25, 2025

Last updated 4 months ago

CVSS medium 6.1

Overview

Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.
Source
security-advisories@github.com
NVD status
Analyzed
Products
libpng

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.1
Impact score
4.2
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Severity
MEDIUM

Weaknesses

security-advisories@github.com
CWE-125

Social media

Hype score
Not currently trending

  1. Critical security update for #SUSE Linux systems. The libpng16 library vulnerabilities (CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018) require immediate attention. Read more: 👉 https://t.co/0qiYa5gWh0 #Security https://t.co/ZngIuGrvBD

    @Cezar_H_Linux

    30 Dec 2025

    54 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-64506 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to befo… https://t.co/enfEKfXjy2

    @CVEnew

    24 Nov 2025

    231 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2025-64506 libpng 1.6.51 https://t.co/LLE3DpmZaZ

    @VulmonFeeds

    22 Nov 2025

    39 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. libpng 1.6.51: Four buffer overflow vulnerabilities fixed https://t.co/qBuxMJIllC CVE-2025-64505, CVE-2025-64506, CVE-2025-64720: Out-of-bounds reads, can result in information disclosure, denial of service CVE-2025-65018: Heap buffer overflow, may enable arbitrary code execution

    @oss_security

    22 Nov 2025

    7010 Impressions

    8 Retweets

    53 Likes

    21 Bookmarks

    1 Reply

    0 Quotes

Configurations

Related CVEs

  1. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.•CVE-2026-25646
  2. Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.•CVE-2025-28164
  3. Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive•CVE-2025-28162
  4. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.•CVE-2026-22801
  5. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.•CVE-2026-22695

References

Sources include official advisories and independent security research.