pnggroup libpng up to 1.6.51 Simplified API png_sRGB_base out-of-bounds

Summaryinfo

A vulnerability, which was classified as problematic, was found in pnggroup libpng up to 1.6.51. Affected by this vulnerability is an unknown functionality of the component Simplified API. The manipulation of the argument png_sRGB_base results in out-of-bounds. This vulnerability is cataloged as CVE-2025-66293. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in pnggroup libpng up to 1.6.51. Affected is some unknown functionality of the component Simplified API. The manipulation of the argument png_sRGB_base with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2025-66293 since 11/27/2025. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 277411 (Linux Distros Unpatched Vulnerability : CVE-2025-66293), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.6.52 eliminates this vulnerability. Applying the patch 788a624d7387a758ffd5c7ab010f1870dea753a1 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (277411), EUVD (EUVD-2025-201132) and CERT Bund (WID-SEC-2025-2737). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• Debian Linux
• Amazon Linux 2
• Red Hat Enterprise Linux
• Fedora Linux
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• Open Source libpng
• Microsoft Azure Linux

Productinfo

Type

• Image Processing Software

Vendor

• pnggroup

Name

• libpng

Version

• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.5
• 1.6.6
• 1.6.7
• 1.6.8
• 1.6.9
• 1.6.10
• 1.6.11
• 1.6.12
• 1.6.13
• 1.6.14
• 1.6.15
• 1.6.16
• 1.6.17
• 1.6.18
• 1.6.19
• 1.6.20
• 1.6.21
• 1.6.22
• 1.6.23
• 1.6.24
• 1.6.25
• 1.6.26
• 1.6.27
• 1.6.28
• 1.6.29
• 1.6.30
• 1.6.31
• 1.6.32
• 1.6.33
• 1.6.34
• 1.6.35
• 1.6.36
• 1.6.37
• 1.6.38
• 1.6.39
• 1.6.40
• 1.6.41
• 1.6.42
• 1.6.43
• 1.6.44
• 1.6.45
• 1.6.46
• 1.6.47
• 1.6.48
• 1.6.49
• 1.6.50
• 1.6.51

License

• open-source

Website

• Product: https://github.com/pnggroup/libpng/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion