Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-65018 (GCVE-0-2025-65018)
Vulnerability from cvelistv5 – Published: 2025-11-24 23:50 – Updated: 2025-11-25 19:29
VLAI?
EPSS
Summary
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
Severity ?
7.1 (High)
Assigner
References
| URL | Tags | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65018",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-11-25T19:29:28.950712Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-11-25T19:29:33.633Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pnggroup/libpng/issues/755"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "libpng",
"vendor": "pnggroup",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.6.0, \u003c 1.6.51"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-24T23:50:18.294Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
},
{
"name": "https://github.com/pnggroup/libpng/issues/755",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pnggroup/libpng/issues/755"
},
{
"name": "https://github.com/pnggroup/libpng/pull/757",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pnggroup/libpng/pull/757"
},
{
"name": "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d"
},
{
"name": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea"
}
],
"source": {
"advisory": "GHSA-7wv6-48j4-hj3g",
"discovery": "UNKNOWN"
},
"title": "LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-65018",
"datePublished": "2025-11-24T23:50:18.294Z",
"dateReserved": "2025-11-13T15:36:51.680Z",
"dateUpdated": "2025-11-25T19:29:33.633Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-65018\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2025-11-25T00:15:47.610\",\"lastModified\":\"2025-11-26T18:34:53.650\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"},{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.6.0\",\"versionEndExcluding\":\"1.6.51\",\"matchCriteriaId\":\"3545FEA5-4FFA-4955-BFDA-CC3602C9A894\"}]}]}],\"references\":[{\"url\":\"https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/pnggroup/libpng/issues/755\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Issue Tracking\"]},{\"url\":\"https://github.com/pnggroup/libpng/pull/757\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/pnggroup/libpng/issues/755\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Issue Tracking\"]},{\"url\":\"https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-65018\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-11-25T19:29:28.950712Z\"}}}], \"references\": [{\"url\": \"https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g\", \"tags\": [\"exploit\"]}, {\"url\": \"https://github.com/pnggroup/libpng/issues/755\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-11-25T19:29:24.065Z\"}}], \"cna\": {\"title\": \"LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`\", \"source\": {\"advisory\": \"GHSA-7wv6-48j4-hj3g\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"pnggroup\", \"product\": \"libpng\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.6.0, \u003c 1.6.51\"}]}], \"references\": [{\"url\": \"https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g\", \"name\": \"https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/pnggroup/libpng/issues/755\", \"name\": \"https://github.com/pnggroup/libpng/issues/755\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/pnggroup/libpng/pull/757\", \"name\": \"https://github.com/pnggroup/libpng/pull/757\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d\", \"name\": \"https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea\", \"name\": \"https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787: Out-of-bounds Write\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2025-11-24T23:50:18.294Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-65018\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-25T19:29:33.633Z\", \"dateReserved\": \"2025-11-13T15:36:51.680Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2025-11-24T23:50:18.294Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
OPENSUSE-SU-2025:15781-1
Vulnerability from csaf_opensuse - Published: 2025-11-28 00:00 - Updated: 2025-11-28 00:00Summary
libpng16-16-1.6.51-1.1 on GA media
Notes
Title of the patch
libpng16-16-1.6.51-1.1 on GA media
Description of the patch
These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-15781
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libpng16-16-1.6.51-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-15781",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15781-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-64505 page",
"url": "https://www.suse.com/security/cve/CVE-2025-64505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-64506 page",
"url": "https://www.suse.com/security/cve/CVE-2025-64506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-64720 page",
"url": "https://www.suse.com/security/cve/CVE-2025-64720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-65018 page",
"url": "https://www.suse.com/security/cve/CVE-2025-65018/"
}
],
"title": "libpng16-16-1.6.51-1.1 on GA media",
"tracking": {
"current_release_date": "2025-11-28T00:00:00Z",
"generator": {
"date": "2025-11-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:15781-1",
"initial_release_date": "2025-11-28T00:00:00Z",
"revision_history": [
{
"date": "2025-11-28T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-16-1.6.51-1.1.aarch64",
"product_id": "libpng16-16-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-16-32bit-1.6.51-1.1.aarch64",
"product_id": "libpng16-16-32bit-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-compat-devel-1.6.51-1.1.aarch64",
"product_id": "libpng16-compat-devel-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-devel-1.6.51-1.1.aarch64",
"product_id": "libpng16-devel-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
"product_id": "libpng16-devel-32bit-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.51-1.1.aarch64",
"product": {
"name": "libpng16-tools-1.6.51-1.1.aarch64",
"product_id": "libpng16-tools-1.6.51-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-16-1.6.51-1.1.ppc64le",
"product_id": "libpng16-16-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
"product_id": "libpng16-16-32bit-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
"product_id": "libpng16-compat-devel-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-devel-1.6.51-1.1.ppc64le",
"product_id": "libpng16-devel-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"product_id": "libpng16-devel-32bit-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.51-1.1.ppc64le",
"product": {
"name": "libpng16-tools-1.6.51-1.1.ppc64le",
"product_id": "libpng16-tools-1.6.51-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-16-1.6.51-1.1.s390x",
"product_id": "libpng16-16-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-16-32bit-1.6.51-1.1.s390x",
"product_id": "libpng16-16-32bit-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-compat-devel-1.6.51-1.1.s390x",
"product_id": "libpng16-compat-devel-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-devel-1.6.51-1.1.s390x",
"product_id": "libpng16-devel-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-devel-32bit-1.6.51-1.1.s390x",
"product_id": "libpng16-devel-32bit-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.51-1.1.s390x",
"product": {
"name": "libpng16-tools-1.6.51-1.1.s390x",
"product_id": "libpng16-tools-1.6.51-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-16-1.6.51-1.1.x86_64",
"product_id": "libpng16-16-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.51-1.1.x86_64",
"product_id": "libpng16-16-32bit-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-compat-devel-1.6.51-1.1.x86_64",
"product_id": "libpng16-compat-devel-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-devel-1.6.51-1.1.x86_64",
"product_id": "libpng16-devel-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
"product_id": "libpng16-devel-32bit-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.51-1.1.x86_64",
"product": {
"name": "libpng16-tools-1.6.51-1.1.x86_64",
"product_id": "libpng16-tools-1.6.51-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-16-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-16-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-16-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-16-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-16-32bit-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-16-32bit-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-compat-devel-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-compat-devel-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-compat-devel-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-devel-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-devel-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-devel-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-devel-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-devel-32bit-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-tools-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64"
},
"product_reference": "libpng16-tools-1.6.51-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-tools-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le"
},
"product_reference": "libpng16-tools-1.6.51-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-tools-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x"
},
"product_reference": "libpng16-tools-1.6.51-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-tools-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
},
"product_reference": "libpng16-tools-1.6.51-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-64505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-64505"
}
],
"notes": [
{
"category": "general",
"text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-64505",
"url": "https://www.suse.com/security/cve/CVE-2025-64505"
},
{
"category": "external",
"summary": "SUSE Bug 1254157 for CVE-2025-64505",
"url": "https://bugzilla.suse.com/1254157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-64505"
},
{
"cve": "CVE-2025-64506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-64506"
}
],
"notes": [
{
"category": "general",
"text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-64506",
"url": "https://www.suse.com/security/cve/CVE-2025-64506"
},
{
"category": "external",
"summary": "SUSE Bug 1254158 for CVE-2025-64506",
"url": "https://bugzilla.suse.com/1254158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-64506"
},
{
"cve": "CVE-2025-64720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-64720"
}
],
"notes": [
{
"category": "general",
"text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha x 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-64720",
"url": "https://www.suse.com/security/cve/CVE-2025-64720"
},
{
"category": "external",
"summary": "SUSE Bug 1254159 for CVE-2025-64720",
"url": "https://bugzilla.suse.com/1254159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-64720"
},
{
"cve": "CVE-2025-65018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-65018"
}
],
"notes": [
{
"category": "general",
"text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-65018",
"url": "https://www.suse.com/security/cve/CVE-2025-65018"
},
{
"category": "external",
"summary": "SUSE Bug 1254160 for CVE-2025-65018",
"url": "https://bugzilla.suse.com/1254160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
"openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-65018"
}
]
}
CERTFR-2025-AVI-1064
Vulnerability from certfr_avis - Published: 2025-12-04 - Updated: 2025-12-04
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | cbl2 cups 2.3.3op2-10 | ||
| Microsoft | N/A | cbl2 grub2 2.06-15 | ||
| Microsoft | N/A | cbl2 nodejs18 18.20.3-9 | ||
| Microsoft | N/A | cbl2 fluent-bit versions antérieures à 3.0.6-5 | ||
| Microsoft | N/A | azl3 kernel versions antérieures à 6.6.117.1-1 | ||
| Microsoft | N/A | azl3 kubevirt 1.5.0-5 | ||
| Microsoft | N/A | cbl2 python-tensorboard 2.11.0-3 | ||
| Microsoft | N/A | azl3 nodejs 20.14.0-9 | ||
| Microsoft | N/A | azl3 glib versions antérieures à 2.78.6-5 | ||
| Microsoft | N/A | azl3 grub2 2.06-25 | ||
| Microsoft | N/A | azl3 libxslt 1.1.43-1 | ||
| Microsoft | N/A | azl3 expat 2.6.4-2 | ||
| Microsoft | N/A | azl3 python-tensorboard 2.16.2-6 | ||
| Microsoft | N/A | cbl2 rsync versions antérieures à 3.4.1-2 | ||
| Microsoft | N/A | cbl2 libxslt 1.1.34-8 | ||
| Microsoft | N/A | azl3 cups 2.4.13-1 | ||
| Microsoft | N/A | cbl2 haproxy versions antérieures à 2.4.24-2 | ||
| Microsoft | N/A | cbl2 kernel 5.15.186.1-1 | ||
| Microsoft | N/A | azl3 libpng versions antérieures à 1.6.51-1 | ||
| Microsoft | N/A | azl3 haproxy versions antérieures à 2.9.11-4 | ||
| Microsoft | N/A | azl3 tensorflow 2.16.1-9 | ||
| Microsoft | N/A | azl3 fluent-bit 3.1.9-6 | ||
| Microsoft | N/A | azl3 rsync versions antérieures à 3.4.1-2 | ||
| Microsoft | N/A | azl3 keras 3.3.3-5 | ||
| Microsoft | N/A | cbl2 libpng versions antérieures à 1.6.51-1 | ||
| Microsoft | N/A | cbl2 glib versions antérieures à 2.71.0-8 | ||
| Microsoft | N/A | cbl2 kubevirt versions antérieures à 0.59.0-31 | ||
| Microsoft | N/A | azl3 libvirt versions antérieures à 10.0.0-6 | ||
| Microsoft | N/A | cbl2 reaper 3.1.1-19 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "cbl2 cups 2.3.3op2-10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 grub2 2.06-15",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 nodejs18 18.20.3-9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 fluent-bit versions ant\u00e9rieures \u00e0 3.0.6-5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 kernel versions ant\u00e9rieures \u00e0 6.6.117.1-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 kubevirt 1.5.0-5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 python-tensorboard 2.11.0-3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 nodejs 20.14.0-9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 glib versions ant\u00e9rieures \u00e0 2.78.6-5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 grub2 2.06-25",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 libxslt 1.1.43-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 expat 2.6.4-2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 python-tensorboard 2.16.2-6",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 rsync versions ant\u00e9rieures \u00e0 3.4.1-2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 libxslt 1.1.34-8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 cups 2.4.13-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 haproxy versions ant\u00e9rieures \u00e0 2.4.24-2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 kernel 5.15.186.1-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 libpng versions ant\u00e9rieures \u00e0 1.6.51-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 haproxy versions ant\u00e9rieures \u00e0 2.9.11-4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 tensorflow 2.16.1-9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 fluent-bit 3.1.9-6",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 rsync versions ant\u00e9rieures \u00e0 3.4.1-2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 keras 3.3.3-5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 libpng versions ant\u00e9rieures \u00e0 1.6.51-1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 glib versions ant\u00e9rieures \u00e0 2.71.0-8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 kubevirt versions ant\u00e9rieures \u00e0 0.59.0-31",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "azl3 libvirt versions ant\u00e9rieures \u00e0 10.0.0-6",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "cbl2 reaper 3.1.1-19",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-58436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58436"
},
{
"name": "CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"name": "CVE-2025-11731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11731"
},
{
"name": "CVE-2025-13226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13226"
},
{
"name": "CVE-2025-13193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13193"
},
{
"name": "CVE-2025-54770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54770"
},
{
"name": "CVE-2025-61915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61915"
},
{
"name": "CVE-2025-61662",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61662"
},
{
"name": "CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"name": "CVE-2025-12977",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12977"
},
{
"name": "CVE-2025-64505",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
},
{
"name": "CVE-2025-61663",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61663"
},
{
"name": "CVE-2025-66382",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66382"
},
{
"name": "CVE-2025-12970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12970"
},
{
"name": "CVE-2025-12638",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12638"
},
{
"name": "CVE-2025-64506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64506"
},
{
"name": "CVE-2025-38656",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38656"
},
{
"name": "CVE-2025-64720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
},
{
"name": "CVE-2025-40210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40210"
},
{
"name": "CVE-2025-66030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66030"
},
{
"name": "CVE-2025-64704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64704"
},
{
"name": "CVE-2025-65018",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
},
{
"name": "CVE-2025-10158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10158"
},
{
"name": "CVE-2025-64713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64713"
},
{
"name": "CVE-2025-66221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66221"
},
{
"name": "CVE-2025-13230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13230"
},
{
"name": "CVE-2025-13601",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13601"
},
{
"name": "CVE-2025-54771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54771"
},
{
"name": "CVE-2025-40211",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40211"
},
{
"name": "CVE-2025-13227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13227"
},
{
"name": "CVE-2025-64324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64324"
},
{
"name": "CVE-2025-12969",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12969"
},
{
"name": "CVE-2025-11230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11230"
},
{
"name": "CVE-2025-61661",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61661"
},
{
"name": "CVE-2022-50233",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-50233"
},
{
"name": "CVE-2025-61664",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61664"
}
],
"initial_release_date": "2025-12-04T00:00:00",
"last_revision_date": "2025-12-04T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-1064",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-12-04T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-61661",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61661"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-13230",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13230"
},
{
"published_at": "2025-11-22",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40210",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40210"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-13227",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13227"
},
{
"published_at": "2025-11-30",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-61915",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61915"
},
{
"published_at": "2025-11-27",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64720",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64720"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-12816",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12816"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64704",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64704"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-54770",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54770"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-11731",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11731"
},
{
"published_at": "2025-12-03",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66221",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66221"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-13601",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13601"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64713",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64713"
},
{
"published_at": "2025-11-27",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-65018",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65018"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66030",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66030"
},
{
"published_at": "2025-11-22",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-40211",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40211"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-50233",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-50233"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66382",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66382"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-61664",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61664"
},
{
"published_at": "2025-11-30",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-58436",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58436"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-13193",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13193"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-61662",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61662"
},
{
"published_at": "2025-11-28",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-38656",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-38656"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-11230",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11230"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-54771",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54771"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-13226",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13226"
},
{
"published_at": "2025-12-03",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-12638",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12638"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-12970",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12970"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-66031",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66031"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-12977",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12977"
},
{
"published_at": "2025-11-21",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-61663",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61663"
},
{
"published_at": "2025-11-29",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-12969",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12969"
},
{
"published_at": "2025-11-20",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64324",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64324"
},
{
"published_at": "2025-11-27",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64506",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64506"
},
{
"published_at": "2025-11-19",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-10158",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-10158"
},
{
"published_at": "2025-11-26",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-64505",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64505"
}
]
}
MSRC_CVE-2025-65018
Vulnerability from csaf_microsoft - Published: 2025-11-02 00:00 - Updated: 2025-12-02 01:40Summary
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
Notes
Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-65018.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`",
"tracking": {
"current_release_date": "2025-12-02T01:40:36.000Z",
"generator": {
"date": "2025-12-03T22:59:15.055Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2025-65018",
"initial_release_date": "2025-11-02T00:00:00.000Z",
"revision_history": [
{
"date": "2025-11-27T01:03:43.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2025-12-02T01:40:36.000Z",
"legacy_version": "2",
"number": "2",
"summary": "Information published."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "3.0",
"product": {
"name": "Azure Linux 3.0",
"product_id": "17084"
}
},
{
"category": "product_version",
"name": "2.0",
"product": {
"name": "CBL Mariner 2.0",
"product_id": "17086"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cazl3 libpng 1.6.40-1",
"product": {
"name": "\u003cazl3 libpng 1.6.40-1",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "azl3 libpng 1.6.40-1",
"product": {
"name": "azl3 libpng 1.6.40-1",
"product_id": "20674"
}
},
{
"category": "product_version_range",
"name": "\u003ccbl2 libpng 1.6.39-1",
"product": {
"name": "\u003ccbl2 libpng 1.6.39-1",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "cbl2 libpng 1.6.39-1",
"product": {
"name": "cbl2 libpng 1.6.39-1",
"product_id": "18435"
}
}
],
"category": "product_name",
"name": "libpng"
},
{
"category": "product_name",
"name": "azl3 qtbase 6.6.3-4",
"product": {
"name": "azl3 qtbase 6.6.3-4",
"product_id": "4"
}
},
{
"category": "product_name",
"name": "azl3 tensorflow 2.16.1-9",
"product": {
"name": "azl3 tensorflow 2.16.1-9",
"product_id": "6"
}
},
{
"category": "product_name",
"name": "cbl2 qt5-qtbase 5.12.11-18",
"product": {
"name": "cbl2 qt5-qtbase 5.12.11-18",
"product_id": "2"
}
},
{
"category": "product_name",
"name": "cbl2 tensorflow 2.11.1-2",
"product": {
"name": "cbl2 tensorflow 2.11.1-2",
"product_id": "3"
}
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 libpng 1.6.40-1 as a component of Azure Linux 3.0",
"product_id": "17084-1"
},
"product_reference": "1",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 libpng 1.6.40-1 as a component of Azure Linux 3.0",
"product_id": "20674-17084"
},
"product_reference": "20674",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 qtbase 6.6.3-4 as a component of Azure Linux 3.0",
"product_id": "17084-4"
},
"product_reference": "4",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 tensorflow 2.16.1-9 as a component of Azure Linux 3.0",
"product_id": "17084-6"
},
"product_reference": "6",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccbl2 libpng 1.6.39-1 as a component of CBL Mariner 2.0",
"product_id": "17086-5"
},
"product_reference": "5",
"relates_to_product_reference": "17086"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cbl2 libpng 1.6.39-1 as a component of CBL Mariner 2.0",
"product_id": "18435-17086"
},
"product_reference": "18435",
"relates_to_product_reference": "17086"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cbl2 qt5-qtbase 5.12.11-18 as a component of CBL Mariner 2.0",
"product_id": "17086-2"
},
"product_reference": "2",
"relates_to_product_reference": "17086"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cbl2 tensorflow 2.11.1-2 as a component of CBL Mariner 2.0",
"product_id": "17086-3"
},
"product_reference": "3",
"relates_to_product_reference": "17086"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-65018",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"flags": [
{
"label": "component_not_present",
"product_ids": [
"17084-4",
"17084-6",
"17086-2",
"17086-3"
]
}
],
"notes": [
{
"category": "general",
"text": "GitHub_M",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"20674-17084",
"18435-17086"
],
"known_affected": [
"17084-1",
"17086-5"
],
"known_not_affected": [
"17084-4",
"17084-6",
"17086-2",
"17086-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-65018.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-11-27T01:03:43.000Z",
"details": "1.6.51-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-1",
"17086-5"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"17084-1",
"17086-5"
]
}
],
"title": "LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`"
}
]
}
FKIE_CVE-2025-65018
Vulnerability from fkie_nvd - Published: 2025-11-25 00:15 - Updated: 2025-11-26 18:34
Severity ?
Summary
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
References
| URL | Tags | ||
|---|---|---|---|
| security-advisories@github.com | https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d | Patch | |
| security-advisories@github.com | https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea | Patch | |
| security-advisories@github.com | https://github.com/pnggroup/libpng/issues/755 | Exploit, Issue Tracking | |
| security-advisories@github.com | https://github.com/pnggroup/libpng/pull/757 | Issue Tracking | |
| security-advisories@github.com | https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g | Exploit, Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/pnggroup/libpng/issues/755 | Exploit, Issue Tracking | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g | Exploit, Vendor Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3545FEA5-4FFA-4955-BFDA-CC3602C9A894",
"versionEndExcluding": "1.6.51",
"versionStartIncluding": "1.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51."
}
],
"id": "CVE-2025-65018",
"lastModified": "2025-11-26T18:34:53.650",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2,
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
},
"published": "2025-11-25T00:15:47.610",
"references": [
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d"
},
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea"
},
{
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Issue Tracking"
],
"url": "https://github.com/pnggroup/libpng/issues/755"
},
{
"source": "security-advisories@github.com",
"tags": [
"Issue Tracking"
],
"url": "https://github.com/pnggroup/libpng/pull/757"
},
{
"source": "security-advisories@github.com",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking"
],
"url": "https://github.com/pnggroup/libpng/issues/755"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-122"
},
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
}
WID-SEC-W-2025-2663
Vulnerability from csaf_certbund - Published: 2025-11-23 23:00 - Updated: 2025-11-24 23:00Summary
libpng: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die libpng ist die offizielle Referenzbibliothek für die Darstellung und Manipulation von Bildern im Portable Network Graphics (PNG) Format.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen und Code auszuführen.
Betroffene Betriebssysteme
- Linux
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die libpng ist die offizielle Referenzbibliothek f\u00fcr die Darstellung und Manipulation von Bildern im Portable Network Graphics (PNG) Format.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libpng ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren und Code auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-2663 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2663.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-2663 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2663"
},
{
"category": "external",
"summary": "libpng Release 1.6.51 vom 2025-11-23",
"url": "https://github.com/pnggroup/libpng/releases/tag/v1.6.51"
},
{
"category": "external",
"summary": "oss-sec mailing list archives vom 2025-11-23",
"url": "https://seclists.org/oss-sec/2025/q4/204"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-4952-h5wq-4m42 vom 2025-11-23",
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-QPR4-XM66-HWW6 vom 2025-11-23",
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-HFC7-PH9C-WCWW vom 2025-11-23",
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-7WV6-48J4-HJ3G vom 2025-11-23",
"url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
},
{
"category": "external",
"summary": "PoC CVE-2025-65018 vom 2025-11-23",
"url": "https://github.com/Neo-Neo6/CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-"
}
],
"source_lang": "en-US",
"title": "libpng: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-11-24T23:00:00.000+00:00",
"generator": {
"date": "2025-11-25T08:37:19.140+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2025-2663",
"initial_release_date": "2025-11-23T23:00:00.000+00:00",
"revision_history": [
{
"date": "2025-11-23T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-11-24T23:00:00.000+00:00",
"number": "2",
"summary": "Referenz(en) aufgenommen: EUVD-2025-199236, EUVD-2025-199237, EUVD-2025-199238, EUVD-2025-199239"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.6.51",
"product": {
"name": "Open Source libpng \u003c1.6.51",
"product_id": "T048833"
}
},
{
"category": "product_version",
"name": "1.6.51",
"product": {
"name": "Open Source libpng 1.6.51",
"product_id": "T048833-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:libpng:libpng:1.6.51"
}
}
}
],
"category": "product_name",
"name": "libpng"
}
],
"category": "vendor",
"name": "Open Source"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-64505",
"product_status": {
"known_affected": [
"T048833"
]
},
"release_date": "2025-11-23T23:00:00.000+00:00",
"title": "CVE-2025-64505"
},
{
"cve": "CVE-2025-64506",
"product_status": {
"known_affected": [
"T048833"
]
},
"release_date": "2025-11-23T23:00:00.000+00:00",
"title": "CVE-2025-64506"
},
{
"cve": "CVE-2025-64720",
"product_status": {
"known_affected": [
"T048833"
]
},
"release_date": "2025-11-23T23:00:00.000+00:00",
"title": "CVE-2025-64720"
},
{
"cve": "CVE-2025-65018",
"product_status": {
"known_affected": [
"T048833"
]
},
"release_date": "2025-11-23T23:00:00.000+00:00",
"title": "CVE-2025-65018"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…