CVE-2026-25646

HIGH EPSS 56.4%
Published Feb 10, 20264mo ago · Modified Jun 17, 20261w ago
8.3 CVSS 4.0
High
Find Similar
Published Feb 10, 2026 4mo ago
Last Modified Jun 17, 2026 1w ago

Description

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.

CVSS Details

Base Score
8.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
56.4% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-122
CWE-126

Affected Products 1

VendorProductVersionRange
libpnglibpng* <1.6.55

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2026/02/09/7
    Mailing List
  • github.com https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88
    Patch
  • github.com https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3
    ExploitVendor Advisory

Remediation

  • github.com https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88
    Patch