CVE catalog

CVE-2026-25646

libpng vulnerability

Severity: High · CVSS 7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Published: Feb 9, 2026, 11:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.09% · Oct 27, 2026

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libpng1.6	sid	`1.6.59-1`	fixed
Debian	libpng1.6	forky	`1.6.59-1`	fixed
Debian	libpng1.6	trixie	`1.6.48-1+deb13u5`	fixed
Debian	libpng1.6	trixie-security	`1.6.48-1+deb13u6`	fixed
Debian	libpng1.6	bookworm	`1.6.39-2+deb12u5`	fixed
Debian	libpng1.6	bookworm-security	`1.6.39-2+deb12u6`	fixed
Ubuntu	libpng1.6	noble	`1.6.43-5ubuntu0.5`	fixed
Ubuntu	libpng-dev	noble	`1.6.43-5ubuntu0.5`	fixed
Ubuntu	libpng-tools	noble	`1.6.43-5ubuntu0.5`	fixed
Ubuntu	libpng16-16t64	noble	`1.6.43-5ubuntu0.5`	fixed
Alpine	libpng	3.20	`1.6.55-r0`	fixed
Alpine	libpng	3.21	`1.6.55-r0`	fixed
Alpine	libpng	3.22	`1.6.55-r0`	fixed
Alpine	libpng	3.23	`1.6.55-r0`	fixed
Alpine	libpng	3.24	`1.6.55-r0`	fixed
Ubuntu	libpng1.6	22.04	`1.6.37-3build4`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3build5`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.4`	fixed
Ubuntu	libpng1.6	24.04	`1.6.40-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.40-2`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.40-3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.42-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5build1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.4`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.5`	fixed
Ubuntu	libpng1.6	25.10	`1.6.47-1.1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.48-1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.49-1~exp1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1~exp1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.4`	fixed
Ubuntu	libpng	pro	`1.2.51-0ubuntu3`	vulnerable
Ubuntu	libpng	pro	`1.2.54-1`	vulnerable
Ubuntu	libpng	pro	`1.2.54-1ubuntu1`	vulnerable
Ubuntu	libpng	pro	`1.2.54-1ubuntu1.1`	vulnerable
Ubuntu	libpng	pro	`1.2.54-1ubuntu1.1+esm1`	vulnerable
Ubuntu	libpng	pro	`1.2.54-1ubuntu1.1+esm2`	fixed
Ubuntu	libpng1.6	pro	`1.6.37-1`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.37-2`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.37-2ubuntu0.1~esm1`	vulnerable
Ubuntu	libpng1.6	pro	`1.6.37-2ubuntu0.1~esm2`	fixed
Ubuntu	libpng1.6	22.04	`1.6.37-3build4`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3build5`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	22.04	`1.6.37-3ubuntu0.4`	fixed
Ubuntu	libpng1.6	24.04	`1.6.40-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.40-2`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.40-3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.42-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5build1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.4`	vulnerable
Ubuntu	libpng1.6	24.04	`1.6.43-5ubuntu0.5`	fixed
Ubuntu	libpng1.6	25.10	`1.6.47-1.1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.48-1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.49-1~exp1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1~exp1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.1`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.3`	vulnerable
Ubuntu	libpng1.6	25.10	`1.6.50-1ubuntu0.4`	fixed
Ubuntu	libpng1.6	26.04	`1.6.50-1`	vulnerable
Ubuntu	libpng1.6	26.04	`1.6.51-1`	vulnerable
Ubuntu	libpng1.6	26.04	`1.6.53-1`	vulnerable
Ubuntu	libpng1.6	26.04	`1.6.54-1`	vulnerable
Ubuntu	libpng1.6	26.04	`1.6.55-1`	fixed
Suse	libpng12	linux enterprise server 12 sp5-ltss	`1.2.59-20.17.1`	fixed
Suse	libpng12	linux enterprise server ltss extended security 12 sp5	`1.2.59-20.17.1`	fixed
Opensuse	libpng12	tumbleweed	`1.2.59-6.1`	fixed
Suse	libpng15	linux enterprise server 12 sp5-ltss	`1.5.30-10.16.1`	fixed
Suse	libpng15	linux enterprise server ltss extended security 12 sp5	`1.5.30-10.16.1`	fixed
Opensuse	libpng16	tumbleweed	`1.6.55-1.1`	fixed
Suse	libpng16	linux enterprise server 12 sp5-ltss	`1.6.8-15.18.1`	fixed
Suse	libpng16	linux enterprise server ltss extended security 12 sp5	`1.6.8-15.18.1`	fixed
Suse	libpng12	linux enterprise module for basesystem 15 sp7	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise high performance computing 15 sp4-espos	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise high performance computing 15 sp4-ltss	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise high performance computing 15 sp5-espos	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise high performance computing 15 sp5-ltss	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server 15 sp4-ltss	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server 15 sp5-ltss	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server 15 sp6-ltss	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server for sap applications 15 sp4	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server for sap applications 15 sp5	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server for sap applications 15 sp6	`1.2.57-150000.4.6.1`	fixed
Opensuse	libpng12	leap 15.6	`1.2.57-150000.4.6.1`	fixed
Suse	libpng12	linux enterprise server 12 sp5-ltss	`1.2.50-20.9.1`	fixed
Suse	libpng12	linux enterprise server ltss extended security 12 sp5	`1.2.50-20.9.1`	fixed
Suse	libpng16	linux enterprise module for basesystem 15 sp7	`1.6.40-150600.3.12.1`	fixed
Suse	libpng16	linux enterprise server 15 sp6-ltss	`1.6.40-150600.3.12.1`	fixed
Suse	libpng16	linux enterprise server for sap applications 15 sp6	`1.6.40-150600.3.12.1`	fixed
Opensuse	libpng16	leap 15.6	`1.6.40-150600.3.12.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libpng1.6	source	sid	`1.6.55-1`	not yet assigned	Not reported	[1127566]
Debian	libpng1.6	source	forky	`1.6.55-1`	not yet assigned	Not reported	[1127566]
Debian	libpng1.6	source	trixie	`1.6.48-1+deb13u3`	not yet assigned	Not reported	[1127566]
Debian	libpng1.6	source	bookworm	`1.6.39-2+deb12u3`	not yet assigned	Not reported	[1127566]
Ubuntu	libpng1.6	deb	noble	`1.6.43-5ubuntu0.5`	Not reported	Not reported	Not reported
Ubuntu	libpng-dev	deb	noble	`1.6.43-5ubuntu0.5`	Not reported	Not reported	Not reported
Ubuntu	libpng-tools	deb	noble	`1.6.43-5ubuntu0.5`	Not reported	Not reported	Not reported
Ubuntu	libpng16-16t64	deb	noble	`1.6.43-5ubuntu0.5`	Not reported	Not reported	Not reported
Alpine	libpng	apk	3.20	`1.6.55-r0`	Not reported	ALPINE-CVE-2026-25646	Not reported
Alpine	libpng	apk	3.21	`1.6.55-r0`	Not reported	ALPINE-CVE-2026-25646	Not reported
Alpine	libpng	apk	3.22	`1.6.55-r0`	Not reported	ALPINE-CVE-2026-25646	Not reported
Alpine	libpng	apk	3.23	`1.6.55-r0`	Not reported	ALPINE-CVE-2026-25646	Not reported
Alpine	libpng	apk	3.24	`1.6.55-r0`	Not reported	ALPINE-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	22.04	`1.6.37-3ubuntu0.4`	Not reported	USN-8039-1	Not reported
Ubuntu	libpng1.6	deb	24.04	`1.6.43-5ubuntu0.5`	Not reported	USN-8039-1	Not reported
Ubuntu	libpng1.6	deb	25.10	`1.6.50-1ubuntu0.4`	Not reported	USN-8039-1	Not reported
Ubuntu	libpng	deb	pro	`1.2.54-1ubuntu1.1+esm2`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	pro	`1.6.37-2ubuntu0.1~esm2`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	22.04	`1.6.37-3ubuntu0.4`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	24.04	`1.6.43-5ubuntu0.5`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	25.10	`1.6.50-1ubuntu0.4`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Ubuntu	libpng1.6	deb	26.04	`1.6.55-1`	Not reported	UBUNTU-CVE-2026-25646	Not reported
Suse	libpng12	rpm	linux enterprise server 12 sp5-ltss	`1.2.59-20.17.1`	Not reported	SUSE-SU-2026:3039-1	Not reported
Suse	libpng12	rpm	linux enterprise server ltss extended security 12 sp5	`1.2.59-20.17.1`	Not reported	SUSE-SU-2026:3039-1	Not reported
Opensuse	libpng12	rpm	tumbleweed	`1.2.59-6.1`	Not reported	OPENSUSE-SU-2026:11265-1	Not reported
Suse	libpng15	rpm	linux enterprise server 12 sp5-ltss	`1.5.30-10.16.1`	Not reported	SUSE-SU-2026:2878-1	Not reported
Suse	libpng15	rpm	linux enterprise server ltss extended security 12 sp5	`1.5.30-10.16.1`	Not reported	SUSE-SU-2026:2878-1	Not reported
Opensuse	libpng16	rpm	tumbleweed	`1.6.55-1.1`	Not reported	OPENSUSE-SU-2026:10188-1	Not reported
Suse	libpng16	rpm	linux enterprise server 12 sp5-ltss	`1.6.8-15.18.1`	Not reported	SUSE-SU-2026:0583-1	Not reported
Suse	libpng16	rpm	linux enterprise server ltss extended security 12 sp5	`1.6.8-15.18.1`	Not reported	SUSE-SU-2026:0583-1	Not reported
Suse	libpng12	rpm	linux enterprise module for basesystem 15 sp7	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise high performance computing 15 sp4-espos	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise high performance computing 15 sp5-espos	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server 15 sp4-ltss	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server 15 sp5-ltss	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server 15 sp6-ltss	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server for sap applications 15 sp4	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server for sap applications 15 sp5	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server for sap applications 15 sp6	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Opensuse	libpng12	rpm	leap 15.6	`1.2.57-150000.4.6.1`	Not reported	SUSE-SU-2026:0599-1	Not reported
Suse	libpng12	rpm	linux enterprise server 12 sp5-ltss	`1.2.50-20.9.1`	Not reported	SUSE-SU-2026:0598-1	Not reported
Suse	libpng12	rpm	linux enterprise server ltss extended security 12 sp5	`1.2.50-20.9.1`	Not reported	SUSE-SU-2026:0598-1	Not reported
Suse	libpng16	rpm	linux enterprise module for basesystem 15 sp7	`1.6.40-150600.3.12.1`	Not reported	SUSE-SU-2026:0597-1	Not reported
Suse	libpng16	rpm	linux enterprise server 15 sp6-ltss	`1.6.40-150600.3.12.1`	Not reported	SUSE-SU-2026:0597-1	Not reported
Suse	libpng16	rpm	linux enterprise server for sap applications 15 sp6	`1.6.40-150600.3.12.1`	Not reported	SUSE-SU-2026:0597-1	Not reported
Opensuse	libpng16	rpm	leap 15.6	`1.6.40-150600.3.12.1`	Not reported	SUSE-SU-2026:0597-1	Not reported

[Debian bug #1127566]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libpng12-0]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng12-0-32bit]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng12-compat-devel]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng12-compat-devel-32bit]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng12-devel]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng12-devel-32bit]Unknown
Source package: [libpng12]
Details (1)
- 1.2.59-6.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.2.59-6.1
  Version impact unknown
  usn · libpng12 · opensuse · tumbleweed
[libpng16-16]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-16-32bit]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-16-x86-64-v3]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-compat-devel]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-compat-devel-32bit]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-compat-devel-x86-64-v3]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-devel]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-devel-32bit]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-devel-x86-64-v3]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed
[libpng16-tools]Unknown
Source package: [libpng16]
Details (1)
- 1.6.58-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.6.55-1.1
  Version impact unknown
  usn · libpng16 · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[libpng16-16]Fixed
Source package: [libpng1.6]
Details (4)
- 1.6.39-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
[libpng-dev]Fixed
Source package: [libpng1.6]
Details (4)
- 1.6.39-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
[libpng-tools]Fixed
Source package: [libpng1.6]
Details (4)
- 1.6.39-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12
- 1.6.39-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.6.39-2+deb12u3
  usn · libpng1.6 · debian · bookworm; usn · libpng1.6 · debian · 12

[Debian 13 (Trixie)]

[libpng16-16t64]Fixed
Source package: [libpng1.6]
Details (5)
- 1.6.48-1+deb13u5 · amd64 · trixie
  Fixed · Fixed: 1.6.48-1+deb13u3
  usn · libpng1.6 · debian · 13
- 1.6.48-1+deb13u5 · arm64 · trixie
  Fixed · Fixed: 1.6.48-1+deb13u3
  usn · libpng1.6 · debian · 13
- 1.6.48-1+deb13u5 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.6.48-1+deb13u3
  usn · libpng1.6 · debian · 13
- 1.6.48-1+deb13u5 · arm64 · trixie-security
  Fixed · Fixed: 1.6.48-1+deb13u3
  usn · libpng1.6 · debian · 13
- 1.6.48-1+deb13u6 · amd64 · trixie-security
  Fixed · Fixed: 1.6.48-1+deb13u3
  usn · libpng1.6 · debian · 13

Next results

Observed: Oct 27, 2026, 9:44:26 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]