Known vulnerabilities in libpng1.6 (Debian package)
Vendor:
Debian
Software:
libpng1.6 (Debian package)
Software CPE:
cpe:2.3:o:debian:libpng1_6_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.48-1+deb13u5
1.6.39-2+deb12u5
1.6.48-1+deb13u4
1.6.39-2+deb12u4
1.6.48-1+deb13u3
1.6.39-2+deb12u3
1.6.48-1+deb13u1
1.6.39-2+deb12u1
1.6.34-2
1.6.28-1+deb9u1
1.6.34-1
1.6.33-1
1.6.32-3
1.6.32-2
1.6.32-1
1.6.31-1
1.6.31-1~exp1
1.6.29-3
1.6.30-1
1.6.30-2
1.6.7-1
1.6.8-1
1.6.8-2
1.6.10-1
1.6.10-2
1.6.16-1
1.6.19-1
1.6.20-1
1.6.20-1.1
1.6.20-2
1.6.20-3
1.6.21-1
1.6.21-2
1.6.21-3
1.6.21-4
1.6.21-5
1.6.22-1
1.6.23-1
1.6.24-1
1.6.24-2
1.6.25-1
1.6.25-2
1.6.26-1
1.6.26-2
1.6.26-3
1.6.26-4
1.6.26-5
1.6.26-6
1.6.27-1
1.6.28-1
1.6.28-1exp1
1.6.28-1exp2
1.6.28-1exp3
1.6.28-1exp4
1.6.29-1
1.6.29-2
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125602 - Use After Free CVE-2026-34757 |
CWE-416 | Low | 1.6.39-2+deb12u5, 1.6.48-1+deb13u5 | 09.04.2026 |
SB2026040960 SB2026042128 SB20260422224 and 10 more |
||
| #VU125601 - Use After Free CVE-2026-33416 |
CWE-416 | High | 1.6.39-2+deb12u4, 1.6.48-1+deb13u4 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 58 more |
||
| #VU125600 - Out-of-bounds read CVE-2026-33636 |
CWE-125 | Medium | 1.6.39-2+deb12u4, 1.6.48-1+deb13u4 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 43 more |
||
| #VU122489 - Heap-based Buffer Overflow CVE-2026-25646 |
CWE-122 | High | 1.6.39-2+deb12u3, 1.6.48-1+deb13u3 | 10.02.2026 |
SB2026021002 SB2026021255 SB2026021256 and 63 more |
||
| #VU121184 - Out-of-bounds read CVE-2026-22801 |
CWE-125 | Medium | 1.6.39-2+deb12u3, 1.6.48-1+deb13u3 | 13.01.2026 |
SB2026011311 SB20260114154 SB2026012271 and 23 more |
||
| #VU121183 - Out-of-bounds read CVE-2026-22695 |
CWE-125 | Medium | 1.6.39-2+deb12u3, 1.6.48-1+deb13u3 | 13.01.2026 |
SB2026011311 SB20260114154 SB2026012137 and 23 more |
||
| #VU119115 - Out-of-bounds read CVE-2025-66293 |
CWE-125 | Medium | 1.6.39-2+deb12u1, 1.6.48-1+deb13u1 | 03.12.2025 |
SB2025120348 SB20251210187 SB2025121761 and 41 more |
||
| #VU118780 - Out-of-bounds read CVE-2025-64505 |
CWE-125 | Medium | 1.6.39-2+deb12u1, 1.6.48-1+deb13u1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 22 more |
||
| #VU118779 - Out-of-bounds read CVE-2025-64506 |
CWE-125 | Medium | 1.6.39-2+deb12u1, 1.6.48-1+deb13u1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 9 more |
||
| #VU118778 - Out-of-bounds read CVE-2025-64720 |
CWE-125 | Medium | 1.6.39-2+deb12u1, 1.6.48-1+deb13u1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 40 more |
||
| #VU118777 - Heap-based Buffer Overflow CVE-2025-65018 |
CWE-122 | Critical | 1.6.39-2+deb12u1, 1.6.48-1+deb13u1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 45 more |
||
| #VU17708 - Use After Free CVE-2019-7317 |
CWE-416 | Low | 1.6.28-1+deb9u1 | 14.02.2019 |
SB2019011606 SB2019041812 SB2019042401 and 45 more |