CVE-2025-64505

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.

• CWE-125

• https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37Patch
• https://github.com/pnggroup/libpng/pull/748Issue Tracking
• https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42Vendor Advisory

Published

Nov 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6450A vulnerability was found in code-projects Simple Online Hot…9.8
• CVE-2025-64500Symfony is a PHP framework for web and console applications …7.3
• CVE-2025-64501ProsemirrorToHtml is a JSON converter which takes ProseMirro…7.6
• CVE-2025-64502Parse Server is an open source backend that can be deployed …6.9
• CVE-2025-64503cups-filters contains backends, filters, and other software …3.3
• CVE-2025-64504Langfuse is an open source large language model engineering …5
• CVE-2025-64506LIBPNG is a reference library for use in applications that r…6.1
• CVE-2025-64507Incus is a system container and virtual machine manager. An …7.8
• CVE-2025-64508Bugsink is a self-hosted error tracking tool. In versions pr…7.5
• CVE-2025-64509Bugsink is a self-hosted error tracking tool. In versions pr…7.5
• CVE-2025-6451A vulnerability was found in code-projects Simple Online Hot…9.8
• CVE-2025-64511MaxKB is an open-source AI assistant for enterprise. In vers…8.8