pnggroup libpng

Name: pnggroup libpng
Brand: pnggroup

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical3high1medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-64720US	—	0.45% (39th)	Exploit	1.6.51	2025-11-25	1.6.0, → 1.6.51
CVE-2025-65018US	—	0.28% (20th)	Exploit	1.6.51	2025-11-25	1.6.0, → 1.6.51
CVE-2026-25646US	high8.1	1.09% (65th)	—	no fix	2026-02-10	≤ < 1.6.55
CVE-2026-33416US	—	1.07% (65th)	—	1.6.56	2026-03-26	1.2.1, → 1.6.56
CVE-2026-33636US	—	0.75% (55th)	—	1.6.56	2026-03-26	1.6.36, → 1.6.56
CVE-2025-66293US	—	0.35% (29th)	—	no fix	2025-12-03	≤ < 1.6.52
CVE-2026-22695US	high7.1	0.22% (13th)	—	no fix	2026-01-12	≤ < 1.6.54
CVE-2025-64505US	—	0.21% (10th)	—	no fix	2025-11-25	≤ < 1.6.51
CVE-2026-40930US	—	0.20% (10th)	—	no fix	2026-06-04	≤ = 1.8.0
CVE-2026-34757US	medium4.4	0.19% (9th)	—	1.6.57	2026-04-09	1.0.9, → 1.6.57
CVE-2025-64506US	—	0.15% (4th)	—	1.6.51	2025-11-25	1.6.0, → 1.6.51
CVE-2026-22801US	high7.8	0.13% (3rd)	—	no fix	2026-01-12	≤ < 1.6.54
CVE-2026-3713US	—	0.13% (3rd)	—	no fix	2026-03-08	56 versions

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read8 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-416Use After Free2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-436Interpretation Conflict1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.