CVE-2025-64506

Name
CVE-2025-64506
Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821
MISC https://github.com/pnggroup/libpng/pull/749
CONFIRM https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6

Match rules

CPE URI Source package Min version Max version
libpng >= 1.6.0 < 1.6.51

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libpng edge-main 1.6.51-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libpng edge-main 1.6.49-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng edge-main 1.6.47-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng edge-main 1.6.46-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng edge-main 1.6.45-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng edge-main 1.6.44-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng edge-main 1.6.37-r0 None possibly vulnerable
libpng 3.22-main 1.6.51-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libpng 3.22-main 1.6.47-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng 3.22-main 1.6.37-r0 None possibly vulnerable
libpng 3.21-main 1.6.47-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng 3.21-main 1.6.44-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng 3.21-main 1.6.37-r0 None possibly vulnerable
libpng 3.20-main 1.6.44-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng 3.20-main 1.6.37-r0 None possibly vulnerable
libpng 3.19-main 1.6.44-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libpng 3.19-main 1.6.37-r0 None possibly vulnerable