PT-2026-4934
CVE-2025-28164
·
Published
2025-01-01
·
Updated
2026-10-09
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libpng versions 1.6.43 through 1.6.46
Description
A buffer overflow condition exists in libpng versions 1.6.43 through 1.6.46. This issue allows a local attacker to potentially cause a denial of service. The
png create read struct() function is affected.Recommendations
Update libpng to a version newer than 1.6.46.
Found an issue in the description? Have something to add? Feel free to write us 👾