Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libpng1.6@1.6.48-1%2Bdeb13u5?distro=trixie
purl pkg:deb/debian/libpng1.6@1.6.48-1%2Bdeb13u5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (27)
Vulnerability Summary Aliases
VCID-26ny-2nf5-33d9 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion CVE-2026-33636
VCID-3846-k31e-qqht libpng: NULL pointer dereference in png_set_text_2() CVE-2016-10087
VCID-3j8e-v8aq-myct libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions CVE-2015-8472
VCID-5m1f-m92p-8bay libpng: LIBPNG out-of-bounds read in png_image_read_composite CVE-2025-66293
VCID-5n9b-crnu-j3hw libpng: does not check length of chunks against user limit CVE-2017-12652
VCID-5qkr-qykw-vqgt CVE-2026-40930
VCID-66u3-82zs-5bek libpng: LIBPNG heap buffer over-read CVE-2025-64506
VCID-6ytz-41qe-nqek libpng: Segmentation fault in png.c:png_free_data function causing denial of service CVE-2018-14048
VCID-9cut-5v1e-kfgf libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images CVE-2015-0973
VCID-9jye-h6m1-uqhf libpng: LIBPNG heap buffer overflow via malformed palette index CVE-2025-64505
VCID-abkq-xugq-2qbg libpng: denial of service via png_push_read_chunk() CVE-2014-0333
VCID-c578-7yh5-7bap CVE-2018-13785
VCID-dqtm-dr5e-5ufq libpng: buffer overflow in png_combine_row CVE-2014-9495
VCID-fgjw-tfum-rfgc libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability CVE-2026-34757
VCID-g9jj-qcjq-h3d4 libpng: LIBPNG buffer overflow CVE-2025-64720
VCID-hgnx-u76a-7kej libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2() CVE-2013-7354
VCID-msp8-t4u3-4ubt libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read CVE-2026-22695
VCID-pd31-msjy-e3fe libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801
VCID-teyp-1gtw-fffb libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() CVE-2013-7353
VCID-u35c-rj5s-fqes libpng: memory leak of png_info struct in pngcp.c CVE-2019-6129
VCID-vf8c-ynvr-qbfe Out-of-bounds write in libpng An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. CVE-2018-14550
GHSA-qwwr-qc2p-6283
VCID-w3t6-s6tj-vuds A use-after-free vulnerability was discovered in the png_image_free function in the libpng library. This could lead to denial of service or a potentially exploitable crash when a malformed image is processed. CVE-2019-7317
VCID-xw2w-9v3w-7ugy libpng: LIBPNG has a heap buffer overflow in png_set_quantize CVE-2026-25646
VCID-yusd-m9he-3kbj libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function CVE-2025-28164
VCID-zhj1-4sn9-qbbm libpng: LIBPNG heap buffer overflow CVE-2025-65018
VCID-ztv5-xba4-c3cc libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416
VCID-zx6x-7hz7-zug3 libpng: libpng: Denial of Service via buffer overflow in pngimage utility CVE-2025-28162

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T16:56:39.028413+00:00 Debian Importer Fixing VCID-5qkr-qykw-vqgt https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.998384+00:00 Debian Importer Fixing VCID-fgjw-tfum-rfgc https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.965585+00:00 Debian Importer Fixing VCID-26ny-2nf5-33d9 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.929800+00:00 Debian Importer Fixing VCID-ztv5-xba4-c3cc https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.893505+00:00 Debian Importer Fixing VCID-xw2w-9v3w-7ugy https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.855903+00:00 Debian Importer Fixing VCID-pd31-msjy-e3fe https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.820159+00:00 Debian Importer Fixing VCID-msp8-t4u3-4ubt https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.782796+00:00 Debian Importer Fixing VCID-5m1f-m92p-8bay https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.744289+00:00 Debian Importer Fixing VCID-zhj1-4sn9-qbbm https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.711523+00:00 Debian Importer Fixing VCID-g9jj-qcjq-h3d4 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.674697+00:00 Debian Importer Fixing VCID-66u3-82zs-5bek https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.637116+00:00 Debian Importer Fixing VCID-9jye-h6m1-uqhf https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.602376+00:00 Debian Importer Fixing VCID-yusd-m9he-3kbj https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.578445+00:00 Debian Importer Fixing VCID-zx6x-7hz7-zug3 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.550398+00:00 Debian Importer Fixing VCID-w3t6-s6tj-vuds https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.523037+00:00 Debian Importer Fixing VCID-u35c-rj5s-fqes https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.501182+00:00 Debian Importer Fixing VCID-vf8c-ynvr-qbfe https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.481915+00:00 Debian Importer Fixing VCID-6ytz-41qe-nqek https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.459968+00:00 Debian Importer Fixing VCID-c578-7yh5-7bap https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.434994+00:00 Debian Importer Fixing VCID-5n9b-crnu-j3hw https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.414654+00:00 Debian Importer Fixing VCID-3846-k31e-qqht https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.392618+00:00 Debian Importer Fixing VCID-3j8e-v8aq-myct https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.367987+00:00 Debian Importer Fixing VCID-9cut-5v1e-kfgf https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.343869+00:00 Debian Importer Fixing VCID-dqtm-dr5e-5ufq https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.317795+00:00 Debian Importer Fixing VCID-abkq-xugq-2qbg https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.296444+00:00 Debian Importer Fixing VCID-hgnx-u76a-7kej https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T16:56:38.277285+00:00 Debian Importer Fixing VCID-teyp-1gtw-fffb https://security-tracker.debian.org/tracker/data/json 38.6.0