Vulnerability intelligence

CVE-2025-65018

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.

CVSS Score

7.1

High

EPSS — Exploit Probability

0.2%

Riskier than 14% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jun 3, 2026 · latest Jun 3, 2026

Coverage timeline

Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild
socradar.io · Jun 3, 2026