7.1 HighCWE-787
CVE-2025-65018
pnggroup libpng vulnerability
pnggrouplibpng
Status
- Not in CISA KEV
- Fixed in version 1.6.51
Exploit probabilityEPSSchecked 22 Oct
0.3%probability of exploitation in the next 30 days
Higher than 17% of scored CVEs
SeverityCVSS
7.1High
Description NVD
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
Coverage No articles yet
No CyberSIXT article names CVE-2025-65018 yet. New articles appear here and in the RSS feed.