UnratedFix available
libpng vulnerabilities
Type: advisorySources: OSV
It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, or disclose sensitive information. (CVE-2025-64505) Joshua Inscoe discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, disclose sensitive information, or execute arbitrary code. (CVE-2026-25646)
- Products
- libpng
- Affected versions
- 1.2.49-4ubuntu1, 1.2.49-5ubuntu1, 1.2.50-1ubuntu1, 1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.1, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.51-0ubuntu3, 1.2.54-1, 1.2.54-1ubuntu1, 1.2.54-1ubuntu1.1, 1.2.54-1ubuntu1.1+esm1
- Fixed versions
- 1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm2
- CVEs
- CVE-2025-64505, CVE-2026-25646
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:16 UTC · Revision 1
Source evidence
It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, or disclose sensitive information. (CVE-2025-64505) Joshua Inscoe discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, disclose sensitive information, or execute arbitrary code. (CVE-2026-25646)
osv:USN-8081-1
libpng
Fixed versions: 1.2.50-1ubuntu2.14.04.3+esm1
libpng
Fixed versions: 1.2.54-1ubuntu1.1+esm2
Complete source record
{
"id": "d2d71c10e43583e49248a19112ef22998703d6bc646b404b2dcd548a038c4bf3",
"url": "https://osv.dev/vulnerability/USN-8081-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "libpng vulnerabilities",
"summary": "It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, or disclose sensitive information. (CVE-2025-64505) Joshua Inscoe discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, disclose sensitive information, or execute arbitrary code. (CVE-2026-25646)",
"evidence": "osv:USN-8081-1",
"products": [
{
"name": {
"value": "libpng",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.2.50-1ubuntu2.14.04.3+esm1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "1.2.49-4ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.49-5ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.50-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.50-1ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.50-1ubuntu2.14.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.50-1ubuntu2.14.04.2",
"evidence": "/affected/0/versions"
},
{
"value": "1.2.50-1ubuntu2.14.04.3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "libpng",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.2.54-1ubuntu1.1+esm2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "1.2.51-0ubuntu3",
"evidence": "/affected/1/versions"
},
{
"value": "1.2.54-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.2.54-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "1.2.54-1ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "1.2.54-1ubuntu1.1+esm1",
"evidence": "/affected/1/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-8081-1",
"aliases": [
"USN-8081-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.50-1ubuntu2.14.04.3+esm1"
}
]
}
],
"package": {
"name": "libpng",
"purl": "pkg:deb/ubuntu/libpng?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"1.2.49-4ubuntu1",
"1.2.49-5ubuntu1",
"1.2.50-1ubuntu1",
"1.2.50-1ubuntu2",
"1.2.50-1ubuntu2.14.04.1",
"1.2.50-1ubuntu2.14.04.2",
"1.2.50-1ubuntu2.14.04.3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8081-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-64505",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-25646",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:14.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpng12-0",
"binary_version": "1.2.50-1ubuntu2.14.04.3+esm1"
},
{
"binary_name": "libpng3",
"binary_version": "1.2.50-1ubuntu2.14.04.3+esm1"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.54-1ubuntu1.1+esm2"
}
]
}
],
"package": {
"name": "libpng",
"purl": "pkg:deb/ubuntu/libpng?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1.2.51-0ubuntu3",
"1.2.54-1",
"1.2.54-1ubuntu1",
"1.2.54-1ubuntu1.1",
"1.2.54-1ubuntu1.1+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8081-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-64505",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-25646",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpng12-0",
"binary_version": "1.2.54-1ubuntu1.1+esm2"
},
{
"binary_name": "libpng3",
"binary_version": "1.2.54-1ubuntu1.1+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
}
],
"modified": "2026-10-27T04:16:47.673771166Z",
"provider": "osv",
"upstream": [
"CVE-2025-64505",
"CVE-2026-25646",
"UBUNTU-CVE-2025-64505",
"UBUNTU-CVE-2026-25646"
],
"references": [
"https://ubuntu.com/security/notices/USN-8081-1",
"https://ubuntu.com/security/CVE-2025-64505",
"https://ubuntu.com/security/CVE-2026-25646"
]
},
"related_cves": [
{
"value": "CVE-2025-64505",
"evidence": "/upstream"
},
{
"value": "CVE-2026-25646",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 460204,
"published_at": "2026-03-11T09:10:16+00:00"
}