LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists…
高危 CVSS 8.1
摘要
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an interna…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88 Patch
- https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 Exploit
- http://www.openwall.com/lists/oss-security/2026/02/09/7 Mailing List
- https://access.redhat.com/errata/RHSA-2026:10097
- https://access.redhat.com/errata/RHSA-2026:12274
- https://access.redhat.com/errata/RHSA-2026:14773
- https://access.redhat.com/errata/RHSA-2026:15087
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:17596
- https://access.redhat.com/errata/RHSA-2026:3031
- https://access.redhat.com/errata/RHSA-2026:3405
- https://access.redhat.com/errata/RHSA-2026:3551
- https://access.redhat.com/errata/RHSA-2026:3573
- https://access.redhat.com/errata/RHSA-2026:3574
- https://access.redhat.com/errata/RHSA-2026:3575
- https://access.redhat.com/errata/RHSA-2026:3576
- https://access.redhat.com/errata/RHSA-2026:3577
- https://access.redhat.com/errata/RHSA-2026:3968
- https://access.redhat.com/errata/RHSA-2026:3969
- https://access.redhat.com/errata/RHSA-2026:4221
- https://access.redhat.com/errata/RHSA-2026:4222
- https://access.redhat.com/errata/RHSA-2026:4306
- https://access.redhat.com/errata/RHSA-2026:4501
- https://access.redhat.com/errata/RHSA-2026:4728
- https://access.redhat.com/errata/RHSA-2026:4729
- https://access.redhat.com/errata/RHSA-2026:4730
- https://access.redhat.com/errata/RHSA-2026:4731
- https://access.redhat.com/errata/RHSA-2026:4732
- https://access.redhat.com/errata/RHSA-2026:4756
- https://access.redhat.com/errata/RHSA-2026:5606
- https://access.redhat.com/errata/RHSA-2026:6439
- https://access.redhat.com/errata/RHSA-2026:6445
- https://access.redhat.com/errata/RHSA-2026:6466
- https://access.redhat.com/errata/RHSA-2026:6467
- https://access.redhat.com/errata/RHSA-2026:6468
- https://access.redhat.com/errata/RHSA-2026:6469
- https://access.redhat.com/errata/RHSA-2026:6553
- https://access.redhat.com/errata/RHSA-2026:6732
- https://access.redhat.com/errata/RHSA-2026:7032
- https://access.redhat.com/errata/RHSA-2026:7033
- https://access.redhat.com/errata/RHSA-2026:7034
- https://access.redhat.com/errata/RHSA-2026:7035
- https://access.redhat.com/errata/RHSA-2026:7036
- https://access.redhat.com/errata/RHSA-2026:7239
- https://access.redhat.com/errata/RHSA-2026:7243
- https://access.redhat.com/errata/RHSA-2026:8746
- https://access.redhat.com/errata/RHSA-2026:8747
- https://access.redhat.com/errata/RHSA-2026:8748
- https://access.redhat.com/errata/RHSA-2026:9254
- https://access.redhat.com/errata/RHSA-2026:9255
- https://access.redhat.com/errata/RHSA-2026:9686
- https://access.redhat.com/errata/RHSA-2026:9687
- https://access.redhat.com/security/cve/CVE-2026-25646
- https://bugzilla.redhat.com/show_bug.cgi?id=2438542
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json
- https://access.redhat.com/errata/RHSA-2026:9683
- https://access.redhat.com/errata/RHSA-2026:9689
时间线
- nvd_ingest NVD