CVE-2025-28162

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.43 through 1.6.46

Description A buffer overflow issue exists in libpng versions 1.6.43 through 1.6.46. A local attacker can potentially cause a denial of service by exploiting the vulnerability through a specially crafted pngimage. When AddressSanitizer (ASan) is enabled, the program may leak memory in multiple locations, resulting in increased memory usage and potentially causing the program to become unresponsive.

Recommendations Update libpng to a version later than 1.6.46.