CVE-2025-65018

Published Nov 25, 2025

Last updated 9 days ago

libpng

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-65018 is a heap buffer overflow vulnerability found in libpng version 1.6.0 through 1.6.50. It is triggered within the `png_combine_row` function, specifically when processing 16-bit interlaced PNG images with an 8-bit output format via `png_image_finish_read`. This vulnerability requires user interaction, as it is triggered by processing a malicious PNG file. Successful exploitation could lead to information disclosure and/or a denial of service. In certain heap configurations, it may also enable arbitrary code execution due to heap corruption.

Description: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
Source: security-advisories@github.com
NVD status: Analyzed
Products: libpng

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.1
Impact score: 5.2
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-122

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3545FEA5-4FFA-4955-BFDA-CC3602C9A894",
            "versionEndExcluding": "1.6.51",
            "versionStartIncluding": "1.6.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.