Security
libpng advisories
The reference C library for PNG, used by Pillow, browsers and most image software
5 advisories recorded for libpng (libpng1.6 on Debian); the project is at https://github.com/pnggroup/libpng. Newest first.
| Published | Advisory | Reaches you | What sillybos does |
|---|---|---|---|
| A palette PNG reaches a flaw in libpng's palette handling CVE-2026-33636 | by opening a file | Refused with a setting | |
| An interlaced 16-bit PNG overflows a libpng buffer CVE-2026-22695 | by opening a file | Refused by default | |
| A palette PNG reaches a flaw in libpng's palette handling CVE-2025-66293 | by opening a file | Refused with a setting | |
| An interlaced 16-bit PNG overflows a libpng buffer CVE-2025-65018 | by opening a file | Refused by default | |
| A palette PNG reaches a flaw in libpng's palette handling CVE-2025-64720 | by opening a file | Refused with a setting |
Back to the whole watch.