p PatchFirst

CVE-2026-25646

CVE-2026-25646 · LIBPNG has a heap buffer overflow in png_set_quantize

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.

CVSS 8.3 · High · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libpng

    Versions
    • < 1.6.55: Affected

    No fix published

  • libpng1.6 Debian:12

    Versions
    • 1.6.39-2
    • 1.6.39-2+deb12u1
    • 1.6.39-2+deb12u2
    Affected ranges
    • ECOSYSTEM: < 1.6.39-2+deb12u3

    Update to 1.6.39-2+deb12u3

  • libpng1.6 Debian:13

    Versions
    • 1.6.48-1
    • 1.6.48-1+deb13u1
    • 1.6.48-1+deb13u2
    Affected ranges
    • ECOSYSTEM: < 1.6.48-1+deb13u3

    Update to 1.6.48-1+deb13u3

  • libpng1.6 Debian:14

    Versions
    • 1.6.48-1
    • 1.6.49-1~exp1
    • 1.6.50-1
    • 1.6.50-1~exp1
    • 1.6.51-1
    • 1.6.52-1
    • 1.6.53-1
    • 1.6.54-1
    Affected ranges
    • ECOSYSTEM: < 1.6.55-1

    Update to 1.6.55-1

  • libpng Ubuntu:Pro:14.04:LTS

    Versions
    • 1.2.49-4ubuntu1
    • 1.2.49-5ubuntu1
    • 1.2.50-1ubuntu1
    • 1.2.50-1ubuntu2
    • 1.2.50-1ubuntu2.14.04.1
    • 1.2.50-1ubuntu2.14.04.2
    • 1.2.50-1ubuntu2.14.04.3
    Affected ranges
    • ECOSYSTEM: < 1.2.50-1ubuntu2.14.04.3+esm1

    Update to 1.2.50-1ubuntu2.14.04.3+esm1

  • libpng Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2.51-0ubuntu3
    • 1.2.54-1
    • 1.2.54-1ubuntu1
    • 1.2.54-1ubuntu1.1
    • 1.2.54-1ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: < 1.2.54-1ubuntu1.1+esm2

    Update to 1.2.54-1ubuntu1.1+esm2

  • libpng1.6 Ubuntu:Pro:16.04:LTS

    Versions
    • 1.6.20-2
    • 1.6.20-2ubuntu0.1~esm1
    • 1.6.20-2ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: < 1.6.20-2ubuntu0.1~esm3

    Update to 1.6.20-2ubuntu0.1~esm3

  • libpng1.6 Ubuntu:Pro:18.04:LTS

    Versions
    • 1.6.34-1
    • 1.6.34-1ubuntu0.18.04.1
    • 1.6.34-1ubuntu0.18.04.2
    • 1.6.34-1ubuntu0.18.04.2+esm1
    Affected ranges
    • ECOSYSTEM: < 1.6.34-1ubuntu0.18.04.2+esm2

    Update to 1.6.34-1ubuntu0.18.04.2+esm2

  • libpng1.6 Ubuntu:Pro:20.04:LTS

    Versions
    • 1.6.37-1
    • 1.6.37-2
    • 1.6.37-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: < 1.6.37-2ubuntu0.1~esm2

    Update to 1.6.37-2ubuntu0.1~esm2

  • libpng1.6 Ubuntu:22.04:LTS

    Versions
    • 1.6.37-3build4
    • 1.6.37-3build5
    • 1.6.37-3ubuntu0.1
    • 1.6.37-3ubuntu0.3
    Affected ranges
    • ECOSYSTEM: < 1.6.37-3ubuntu0.4

    Update to 1.6.37-3ubuntu0.4

  • libpng1.6 Ubuntu:24.04:LTS

    Versions
    • 1.6.40-1
    • 1.6.40-2
    • 1.6.40-3
    • 1.6.42-1
    • 1.6.43-1
    • 1.6.43-3
    • 1.6.43-5build1
    • 1.6.43-5ubuntu0.1
    • 1.6.43-5ubuntu0.3
    • 1.6.43-5ubuntu0.4
    Affected ranges
    • ECOSYSTEM: < 1.6.43-5ubuntu0.5

    Update to 1.6.43-5ubuntu0.5

  • libpng1.6 Ubuntu:25.10

    Versions
    • 1.6.47-1.1
    • 1.6.48-1
    • 1.6.49-1~exp1
    • 1.6.50-1~exp1
    • 1.6.50-1
    • 1.6.50-1ubuntu0.1
    • 1.6.50-1ubuntu0.3
    Affected ranges
    • ECOSYSTEM: < 1.6.50-1ubuntu0.4

    Update to 1.6.50-1ubuntu0.4

  • libpng1.6 Ubuntu:26.04:LTS

    Versions
    • 1.6.50-1
    • 1.6.51-1
    • 1.6.53-1
    • 1.6.54-1
    Affected ranges
    • ECOSYSTEM: < 1.6.55-1

    Update to 1.6.55-1

Original sources

Check your server →