Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =1.6.37-3 || >=0 <1.6.37-3+deb11u1 | 1.6.37-3+deb11u1 |
debian 12 | | =1.6.39-2 || >=0 <1.6.39-2+deb12u1 | 1.6.39-2+deb12u1 |
debian 13 | | =1.6.48-1 || >=0 <1.6.48-1+deb13u1 | 1.6.48-1+deb13u1 |
debian 14 | | =1.6.48-1 || =1.6.49-1~exp1 || =1.6.50-1 || =1.6.50-1~exp1 || >=0 <1.6.51-1 | 1.6.51-1 |
 alpine v3.22 | | =1.2.34-r0 || =1.2.35-r0 || =1.2.36-r0 || =1.2.37-r0 || =1.2.38-r0 || =1.2.39-r0 || =1.2.40-r0 || =1.4.0-r0 || =1.4.1-r0 || =1.4.1-r1 || =1.4.2-r0 || =1.4.3-r0 || =1.4.4-r0 || =1.4.5-r0 || =1.4.5-r1 || =1.5.10-r0 || =1.5.11-r0 || =1.5.12-r0 || =1.5.13-r0 || =1.5.14-r0 || =1.5.15-r0 || =1.5.16-r0 || =1.5.17-r0 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r2 || =1.5.4-r0 || =1.5.5-r0 || =1.5.5-r1 || =1.5.8-r0 || =1.5.9-r0 || =1.6.10-r0 || =1.6.12-r0 || =1.6.13-r0 || =1.6.14-r0 || =1.6.15-r0 || =1.6.16-r0 || =1.6.17-r0 || =1.6.18-r0 || =1.6.19-r0 || =1.6.20-r0 || =1.6.21-r0 || =1.6.22-r0 || =1.6.23-r0 || =1.6.23-r1 || =1.6.23-r2 || =1.6.24-r0 || =1.6.25-r0 || =1.6.26-r0 || =1.6.27-r0 || =1.6.27-r1 || =1.6.28-r0 || =1.6.29-r0 || =1.6.29-r1 || =1.6.3-r0 || =1.6.30-r0 || =1.6.31-r0 || =1.6.32-r0 || =1.6.34-r0 || =1.6.34-r1 || =1.6.35-r0 || =1.6.37-r0 || =1.6.37-r1 || =1.6.37-r2 || =1.6.38-r0 || =1.6.39-r0 || =1.6.39-r1 || =1.6.39-r2 || =1.6.39-r3 || =1.6.39-r4 || =1.6.40-r0 || =1.6.41-r0 || =1.6.42-r0 || =1.6.43-r0 || =1.6.44-r0 || =1.6.45-r0 || =1.6.46-r0 || =1.6.47-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.6.7-r0 || =1.6.8-r0 || =1.6.9-r0 || >=0 <1.6.51-r0 | 1.6.51-r0 |
alpine v3.21 | | =1.2.34-r0 || =1.2.35-r0 || =1.2.36-r0 || =1.2.37-r0 || =1.2.38-r0 || =1.2.39-r0 || =1.2.40-r0 || =1.4.0-r0 || =1.4.1-r0 || =1.4.1-r1 || =1.4.2-r0 || =1.4.3-r0 || =1.4.4-r0 || =1.4.5-r0 || =1.4.5-r1 || =1.5.10-r0 || =1.5.11-r0 || =1.5.12-r0 || =1.5.13-r0 || =1.5.14-r0 || =1.5.15-r0 || =1.5.16-r0 || =1.5.17-r0 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r2 || =1.5.4-r0 || =1.5.5-r0 || =1.5.5-r1 || =1.5.8-r0 || =1.5.9-r0 || =1.6.10-r0 || =1.6.12-r0 || =1.6.13-r0 || =1.6.14-r0 || =1.6.15-r0 || =1.6.16-r0 || =1.6.17-r0 || =1.6.18-r0 || =1.6.19-r0 || =1.6.20-r0 || =1.6.21-r0 || =1.6.22-r0 || =1.6.23-r0 || =1.6.23-r1 || =1.6.23-r2 || =1.6.24-r0 || =1.6.25-r0 || =1.6.26-r0 || =1.6.27-r0 || =1.6.27-r1 || =1.6.28-r0 || =1.6.29-r0 || =1.6.29-r1 || =1.6.3-r0 || =1.6.30-r0 || =1.6.31-r0 || =1.6.32-r0 || =1.6.34-r0 || =1.6.34-r1 || =1.6.35-r0 || =1.6.37-r0 || =1.6.37-r1 || =1.6.37-r2 || =1.6.38-r0 || =1.6.39-r0 || =1.6.39-r1 || =1.6.39-r2 || =1.6.39-r3 || =1.6.39-r4 || =1.6.40-r0 || =1.6.41-r0 || =1.6.42-r0 || =1.6.43-r0 || =1.6.44-r0 || =1.6.47-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.6.7-r0 || =1.6.8-r0 || =1.6.9-r0 || >=0 <1.6.53-r0 | 1.6.53-r0 |
alpine v3.20 | | =1.2.34-r0 || =1.2.35-r0 || =1.2.36-r0 || =1.2.37-r0 || =1.2.38-r0 || =1.2.39-r0 || =1.2.40-r0 || =1.4.0-r0 || =1.4.1-r0 || =1.4.1-r1 || =1.4.2-r0 || =1.4.3-r0 || =1.4.4-r0 || =1.4.5-r0 || =1.4.5-r1 || =1.5.10-r0 || =1.5.11-r0 || =1.5.12-r0 || =1.5.13-r0 || =1.5.14-r0 || =1.5.15-r0 || =1.5.16-r0 || =1.5.17-r0 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r2 || =1.5.4-r0 || =1.5.5-r0 || =1.5.5-r1 || =1.5.8-r0 || =1.5.9-r0 || =1.6.10-r0 || =1.6.12-r0 || =1.6.13-r0 || =1.6.14-r0 || =1.6.15-r0 || =1.6.16-r0 || =1.6.17-r0 || =1.6.18-r0 || =1.6.19-r0 || =1.6.20-r0 || =1.6.21-r0 || =1.6.22-r0 || =1.6.23-r0 || =1.6.23-r1 || =1.6.23-r2 || =1.6.24-r0 || =1.6.25-r0 || =1.6.26-r0 || =1.6.27-r0 || =1.6.27-r1 || =1.6.28-r0 || =1.6.29-r0 || =1.6.29-r1 || =1.6.3-r0 || =1.6.30-r0 || =1.6.31-r0 || =1.6.32-r0 || =1.6.34-r0 || =1.6.34-r1 || =1.6.35-r0 || =1.6.37-r0 || =1.6.37-r1 || =1.6.37-r2 || =1.6.38-r0 || =1.6.39-r0 || =1.6.39-r1 || =1.6.39-r2 || =1.6.39-r3 || =1.6.39-r4 || =1.6.40-r0 || =1.6.41-r0 || =1.6.42-r0 || =1.6.43-r0 || =1.6.44-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.6.7-r0 || =1.6.8-r0 || =1.6.9-r0 || >=0 <1.6.53-r0 | 1.6.53-r0 |
alpine v3.23 | | =1.2.34-r0 || =1.2.35-r0 || =1.2.36-r0 || =1.2.37-r0 || =1.2.38-r0 || =1.2.39-r0 || =1.2.40-r0 || =1.4.0-r0 || =1.4.1-r0 || =1.4.1-r1 || =1.4.2-r0 || =1.4.3-r0 || =1.4.4-r0 || =1.4.5-r0 || =1.4.5-r1 || =1.5.10-r0 || =1.5.11-r0 || =1.5.12-r0 || =1.5.13-r0 || =1.5.14-r0 || =1.5.15-r0 || =1.5.16-r0 || =1.5.17-r0 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r2 || =1.5.4-r0 || =1.5.5-r0 || =1.5.5-r1 || =1.5.8-r0 || =1.5.9-r0 || =1.6.10-r0 || =1.6.12-r0 || =1.6.13-r0 || =1.6.14-r0 || =1.6.15-r0 || =1.6.16-r0 || =1.6.17-r0 || =1.6.18-r0 || =1.6.19-r0 || =1.6.20-r0 || =1.6.21-r0 || =1.6.22-r0 || =1.6.23-r0 || =1.6.23-r1 || =1.6.23-r2 || =1.6.24-r0 || =1.6.25-r0 || =1.6.26-r0 || =1.6.27-r0 || =1.6.27-r1 || =1.6.28-r0 || =1.6.29-r0 || =1.6.29-r1 || =1.6.3-r0 || =1.6.30-r0 || =1.6.31-r0 || =1.6.32-r0 || =1.6.34-r0 || =1.6.34-r1 || =1.6.35-r0 || =1.6.37-r0 || =1.6.37-r1 || =1.6.37-r2 || =1.6.38-r0 || =1.6.39-r0 || =1.6.39-r1 || =1.6.39-r2 || =1.6.39-r3 || =1.6.39-r4 || =1.6.40-r0 || =1.6.41-r0 || =1.6.42-r0 || =1.6.43-r0 || =1.6.44-r0 || =1.6.45-r0 || =1.6.46-r0 || =1.6.47-r0 || =1.6.49-r0 || =1.6.5-r0 || =1.6.6-r0 || =1.6.7-r0 || =1.6.8-r0 || =1.6.9-r0 || >=0 <1.6.51-r0 | 1.6.51-r0 |
 rpm rhel8 | | | 1:1.8.0.482.b08-1.el8 |
rpm rhel9.6 | | | 1:17.0.18.0.8-1.el9 |
