CVE catalog

CVE-2026-33416

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_se

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.07% · Oct 25, 2026

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibpng1.6sid1.6.59-1fixed
Debianlibpng1.6forky1.6.59-1fixed
Debianlibpng1.6trixie1.6.48-1+deb13u5fixed
Debianlibpng1.6trixie-security1.6.48-1+deb13u6fixed
Debianlibpng1.6bookworm1.6.39-2+deb12u5fixed
Debianlibpng1.6bookworm-security1.6.39-2+deb12u6fixed
Cpelibpng1.6Not reported1.6.43-5ubuntu0.6fixed
Cpelibpng-devNot reported1.6.43-5ubuntu0.6fixed
Cpelibpng-toolsNot reported1.6.43-5ubuntu0.6fixed
Cpelibpng16-16t64Not reported1.6.43-5ubuntu0.6fixed
CpelibpngNot reported1.6.56fixed
Alpinelibpng3.201.6.56-r0fixed
Alpinelibpng3.211.6.56-r0fixed
Alpinelibpng3.221.6.56-r0fixed
Alpinelibpng3.231.6.56-r0fixed
Alpinelibpng3.241.6.56-r0fixed
Ubuntulibpngpro1.2.51-0ubuntu3vulnerable
Ubuntulibpngpro1.2.54-1vulnerable
Ubuntulibpngpro1.2.54-1ubuntu1vulnerable
Ubuntulibpngpro1.2.54-1ubuntu1.1vulnerable
Ubuntulibpngpro1.2.54-1ubuntu1.1+esm1vulnerable
Ubuntulibpngpro1.2.54-1ubuntu1.1+esm2vulnerable
Ubuntulibpngpro1.2.54-1ubuntu1.1+esm3fixed
Ubuntulibpng1.6pro1.6.37-1vulnerable
Ubuntulibpng1.6pro1.6.37-2vulnerable
Ubuntulibpng1.6pro1.6.37-2ubuntu0.1~esm1vulnerable
Ubuntulibpng1.6pro1.6.37-2ubuntu0.1~esm2vulnerable
Ubuntulibpng1.6pro1.6.37-2ubuntu0.1~esm3fixed
Ubuntulibpng1.622.041.6.37-3build4vulnerable
Ubuntulibpng1.622.041.6.37-3build5vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.1vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.3vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.4vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.5fixed
Ubuntulibpng1.624.041.6.40-1vulnerable
Ubuntulibpng1.624.041.6.40-2vulnerable
Ubuntulibpng1.624.041.6.40-3vulnerable
Ubuntulibpng1.624.041.6.42-1vulnerable
Ubuntulibpng1.624.041.6.43-1vulnerable
Ubuntulibpng1.624.041.6.43-3vulnerable
Ubuntulibpng1.624.041.6.43-5build1vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.1vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.3vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.4vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.5vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.6fixed
Ubuntulibpng1.625.101.6.47-1.1vulnerable
Ubuntulibpng1.625.101.6.48-1vulnerable
Ubuntulibpng1.625.101.6.49-1~exp1vulnerable
Ubuntulibpng1.625.101.6.50-1~exp1vulnerable
Ubuntulibpng1.625.101.6.50-1vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.1vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.3vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.4vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.5fixed
Ubuntulibpng1.622.041.6.37-3build4vulnerable
Ubuntulibpng1.622.041.6.37-3build5vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.1vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.3vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.4vulnerable
Ubuntulibpng1.622.041.6.37-3ubuntu0.5fixed
Ubuntulibpng1.624.041.6.40-1vulnerable
Ubuntulibpng1.624.041.6.40-2vulnerable
Ubuntulibpng1.624.041.6.40-3vulnerable
Ubuntulibpng1.624.041.6.42-1vulnerable
Ubuntulibpng1.624.041.6.43-1vulnerable
Ubuntulibpng1.624.041.6.43-3vulnerable
Ubuntulibpng1.624.041.6.43-5build1vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.1vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.3vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.4vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.5vulnerable
Ubuntulibpng1.624.041.6.43-5ubuntu0.6fixed
Ubuntulibpng1.625.101.6.47-1.1vulnerable
Ubuntulibpng1.625.101.6.48-1vulnerable
Ubuntulibpng1.625.101.6.49-1~exp1vulnerable
Ubuntulibpng1.625.101.6.50-1~exp1vulnerable
Ubuntulibpng1.625.101.6.50-1vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.1vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.3vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.4vulnerable
Ubuntulibpng1.625.101.6.50-1ubuntu0.5fixed
Opensuselibpng12tumbleweed1.2.59-5.1fixed
Suselibpng16linux enterprise server 16.01.6.44-160000.6.1fixed
Suselibpng16linux enterprise server for sap applications 16.01.6.44-160000.6.1fixed
Suselibpng15linux enterprise server 12 sp5-ltss1.5.22-10.10.1fixed
Suselibpng15linux enterprise server ltss extended security 12 sp51.5.22-10.10.1fixed
Suselibpng16linux enterprise module for basesystem 15 sp71.6.40-150600.3.17.1fixed
Suselibpng16linux enterprise server 15 sp6-ltss1.6.40-150600.3.17.1fixed
Suselibpng16linux enterprise server for sap applications 15 sp61.6.40-150600.3.17.1fixed
Opensuselibpng16leap 15.61.6.40-150600.3.17.1fixed
Suselibpng16linux enterprise server 12 sp5-ltss1.6.8-15.21.1fixed
Suselibpng16linux enterprise server ltss extended security 12 sp51.6.8-15.21.1fixed
Suselibpng16linux enterprise micro 5.31.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise micro 5.41.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise micro 5.51.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise high performance computing 15 sp4-espos1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise high performance computing 15 sp4-ltss1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise high performance computing 15 sp5-espos1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise high performance computing 15 sp5-ltss1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise server 15 sp4-ltss1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise server 15 sp5-ltss1.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise server for sap applications 15 sp41.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise server for sap applications 15 sp51.6.34-150000.3.22.1fixed
Suselibpng16linux enterprise micro 5.21.6.34-150000.3.22.1fixed
Suselibpng16linux micro 6.01.6.43-4.1fixed
Suselibpng16linux micro 6.11.6.43-slfo.1.1_4.1fixed
Suselibpng16linux micro 6.21.6.44-160000.6.1fixed
Opensuselibpng16leap 16.01.6.44-160000.6.1fixed
Opensuselibpng16tumbleweed1.6.56-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibpng1.6sourcesid1.6.56-1not yet assignedNot reported[1132012]
Debianlibpng1.6sourceforky1.6.56-1not yet assignedNot reported[1132012]
Debianlibpng1.6sourcetrixie1.6.48-1+deb13u4not yet assignedNot reported[1132012]
Debianlibpng1.6sourcebookworm1.6.39-2+deb12u4not yet assignedNot reported[1132012]
Cpelibpng1.6cpeNot reported1.6.43-5ubuntu0.6Not reportedNot reportedNot reported
Cpelibpng-devcpeNot reported1.6.43-5ubuntu0.6Not reportedNot reportedNot reported
Cpelibpng-toolscpeNot reported1.6.43-5ubuntu0.6Not reportedNot reportedNot reported
Cpelibpng16-16t64cpeNot reported1.6.43-5ubuntu0.6Not reportedNot reportedNot reported
CpelibpngcpeNot reported1.6.56Not reportedNot reportedNot reported
Alpinelibpngapk3.201.6.56-r0Not reportedALPINE-CVE-2026-33416Not reported
Alpinelibpngapk3.211.6.56-r0Not reportedALPINE-CVE-2026-33416Not reported
Alpinelibpngapk3.221.6.56-r0Not reportedALPINE-CVE-2026-33416Not reported
Alpinelibpngapk3.231.6.56-r0Not reportedALPINE-CVE-2026-33416Not reported
Alpinelibpngapk3.241.6.56-r0Not reportedALPINE-CVE-2026-33416Not reported
Ubuntulibpngdebpro1.2.54-1ubuntu1.1+esm3Not reportedUBUNTU-CVE-2026-33416Not reported
Ubuntulibpng1.6debpro1.6.37-2ubuntu0.1~esm3Not reportedUBUNTU-CVE-2026-33416Not reported
Ubuntulibpng1.6deb22.041.6.37-3ubuntu0.5Not reportedUBUNTU-CVE-2026-33416Not reported
Ubuntulibpng1.6deb24.041.6.43-5ubuntu0.6Not reportedUBUNTU-CVE-2026-33416Not reported
Ubuntulibpng1.6deb25.101.6.50-1ubuntu0.5Not reportedUBUNTU-CVE-2026-33416Not reported
Ubuntulibpng1.6deb22.041.6.37-3ubuntu0.5Not reportedUSN-8251-1Not reported
Ubuntulibpng1.6deb24.041.6.43-5ubuntu0.6Not reportedUSN-8251-1Not reported
Ubuntulibpng1.6deb25.101.6.50-1ubuntu0.5Not reportedUSN-8251-1Not reported
Opensuselibpng12rpmtumbleweed1.2.59-5.1Not reportedOPENSUSE-SU-2026:10640-1Not reported
Suselibpng16rpmlinux enterprise server 16.01.6.44-160000.6.1Not reportedSUSE-SU-2026:21138-1Not reported
Suselibpng16rpmlinux enterprise server for sap applications 16.01.6.44-160000.6.1Not reportedSUSE-SU-2026:21138-1Not reported
Suselibpng15rpmlinux enterprise server 12 sp5-ltss1.5.22-10.10.1Not reportedSUSE-SU-2026:1500-1Not reported
Suselibpng15rpmlinux enterprise server ltss extended security 12 sp51.5.22-10.10.1Not reportedSUSE-SU-2026:1500-1Not reported
Suselibpng16rpmlinux enterprise module for basesystem 15 sp71.6.40-150600.3.17.1Not reportedSUSE-SU-2026:1368-1Not reported
Suselibpng16rpmlinux enterprise server 15 sp6-ltss1.6.40-150600.3.17.1Not reportedSUSE-SU-2026:1368-1Not reported
Suselibpng16rpmlinux enterprise server for sap applications 15 sp61.6.40-150600.3.17.1Not reportedSUSE-SU-2026:1368-1Not reported
Opensuselibpng16rpmleap 15.61.6.40-150600.3.17.1Not reportedSUSE-SU-2026:1368-1Not reported
Suselibpng16rpmlinux enterprise server 12 sp5-ltss1.6.8-15.21.1Not reportedSUSE-SU-2026:1311-1Not reported
Suselibpng16rpmlinux enterprise server ltss extended security 12 sp51.6.8-15.21.1Not reportedSUSE-SU-2026:1311-1Not reported
Suselibpng16rpmlinux enterprise micro 5.31.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise micro 5.41.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise micro 5.51.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise high performance computing 15 sp4-espos1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise high performance computing 15 sp4-ltss1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise high performance computing 15 sp5-espos1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise high performance computing 15 sp5-ltss1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise server 15 sp4-ltss1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise server 15 sp5-ltss1.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise server for sap applications 15 sp41.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise server for sap applications 15 sp51.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux enterprise micro 5.21.6.34-150000.3.22.1Not reportedSUSE-SU-2026:1323-1Not reported
Suselibpng16rpmlinux micro 6.01.6.43-4.1Not reportedSUSE-SU-2026:21067-1Not reported
Suselibpng16rpmlinux micro 6.11.6.43-slfo.1.1_4.1Not reportedSUSE-SU-2026:21038-1Not reported
Suselibpng16rpmlinux micro 6.21.6.44-160000.6.1Not reportedSUSE-SU-2026:21000-1Not reported
Opensuselibpng16rpmleap 16.01.6.44-160000.6.1Not reportedOPENSUSE-SU-2026:20466-1Not reported
Opensuselibpng16rpmtumbleweed1.6.56-1.1Not reportedOPENSUSE-SU-2026:10451-1Not reported

[Debian bug #1132012]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libpng12-0]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng12-0-32bit]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng12-compat-devel]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng12-compat-devel-32bit]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng12-devel]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng12-devel-32bit]Unknown

    Source package: [libpng12]

    Details (1)

    • 1.2.59-6.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.59-5.1

      Version impact unknown

      nvd · libpng12 · opensuse · tumbleweed

  • [libpng16-16]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-16-32bit]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-16-x86-64-v3]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-compat-devel]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-compat-devel-32bit]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-compat-devel-x86-64-v3]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-devel]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-devel-32bit]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-devel-x86-64-v3]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

  • [libpng16-tools]Unknown

    Source package: [libpng16]

    Details (1)

    • 1.6.58-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.56-1.1

      Version impact unknown

      nvd · libpng16 · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [libpng16-16]Fixed

    Source package: [libpng1.6]

    Details (4)

    • 1.6.39-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · amd64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

  • [libpng-dev]Fixed

    Source package: [libpng1.6]

    Details (4)

    • 1.6.39-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · amd64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

  • [libpng-tools]Fixed

    Source package: [libpng1.6]

    Details (4)

    • 1.6.39-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · amd64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

    • 1.6.39-2+deb12u5 · arm64 · bookworm-security

      Fixed · Fixed: 1.6.39-2+deb12u4

      nvd · libpng1.6 · debian · bookworm; nvd · libpng1.6 · debian · 12

[Debian 13 (Trixie)]

  • [libpng16-16t64]Fixed

    Source package: [libpng1.6]

    Details (5)

    • 1.6.48-1+deb13u5 · amd64 · trixie

      Fixed · Fixed: 1.6.48-1+deb13u4

      nvd · libpng1.6 · debian · 13

    • 1.6.48-1+deb13u5 · arm64 · trixie

      Fixed · Fixed: 1.6.48-1+deb13u4

      nvd · libpng1.6 · debian · 13

    • 1.6.48-1+deb13u5 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.6.48-1+deb13u4

      nvd · libpng1.6 · debian · 13

    • 1.6.48-1+deb13u5 · arm64 · trixie-security

      Fixed · Fixed: 1.6.48-1+deb13u4

      nvd · libpng1.6 · debian · 13

    • 1.6.48-1+deb13u6 · amd64 · trixie-security

      Fixed · Fixed: 1.6.48-1+deb13u4

      nvd · libpng1.6 · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]