CoreCVE
Back

HIGH

LIBPNG has an out-of-bounds read in png_image_read_composite

Published Dec 3, 2025

Description

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

Affected products

Remediation

Red Hat statement

The Red Hat Product Security team has rated this vulnerability as Important as it affects libpng, a widely used library for PNG image processing. The flaw is due to an out-of-bounds read in libpng’s simplified API when handling specially crafted PNG images containing partial transparency and gamma correction data. Successful exploitation could result in information disclosure or cause application crashes in applications processing untrusted PNG content.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (12)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitHub_M
Published Dec 3, 2025
Updated Dec 4, 2025
Reserved Nov 26, 2025
Link CVE-2025-66293
CISA Vulnrichment
Updated Dec 3, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-66293
Red Hat
Severity Important
Public date Dec 3, 2025
Links CVE-2025-66293 - Bugzilla
ENISA EUVD
Assigner GitHub_M
Published Dec 3, 2025
Updated Dec 4, 2025
Exploited since n/a
Link EUVD-2025-201132
EUVD-2025-201132