CVE-2025-66293

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management. Upgrade to libpng 1.6.52 or later.

Database specific

{
    "cwe_ids": [
        "CWE-125"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66293.json"
}

References

Affected packages

Git / github.com/glennrp/libpng

Affected ranges

Type: GIT
Repo: https://github.com/glennrp/libpng
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

fbed16182b92eeb3a06d96e49f0836d450318098

Affected versions

libpng-1.*

libpng-1.6.10-signed

libpng-1.6.11-signed

libpng-1.6.12-signed

libpng-1.6.13-signed

libpng-1.6.14-signed

libpng-1.6.15-master-signed

libpng-1.6.15-signed

libpng-1.6.16-master-signed

libpng-1.6.16-signed

libpng-1.6.17-master-signed

libpng-1.6.17-signed

libpng-1.6.18-master-signed

libpng-1.6.18-signed

libpng-1.6.2-signed

libpng-1.6.20-master-signed

libpng-1.6.20-signed

libpng-1.6.21-master-signed

libpng-1.6.21-signed

libpng-1.6.23-signed

libpng-1.6.24-master-signed

libpng-1.6.24-signed

libpng-1.6.25-master-signed

libpng-1.6.25-signed

libpng-1.6.26-master-signed

libpng-1.6.26-signed

libpng-1.6.28-signed

libpng-1.6.29-master-signed

libpng-1.6.29-signed

libpng-1.6.3-signed

libpng-1.6.30-master-signed

libpng-1.6.30-signed

libpng-1.6.31-master-signed

libpng-1.6.31-signed

libpng-1.6.4-signed

libpng-1.6.7-signed

libpng-1.6.8-signed

libpng-1.6.9-signed

v0.*

v0.71

v0.81

v0.82

v0.85

v0.86

v0.87

v0.88

v0.89

v0.89c

v0.90

v0.96

v0.97

v0.97a

v0.97c

v0.98

v0.99

v0.99a

v0.99c

v0.99d

v0.99e

v0.99i

v0.99j

v0.99k

v0.99m

v0.99n

v0.99p

v1.*

v1.0.0

v1.0.0a

v1.0.0b

v1.0.1

v1.0.10

v1.0.10beta1

v1.0.10rc1

v1.0.11

v1.0.11beta1

v1.0.11beta2

v1.0.11beta3

v1.0.11rc1

v1.0.12beta1

v1.0.1a

v1.0.1b

v1.0.1c

v1.0.1d

v1.0.1e

v1.0.2

v1.0.2a

v1.0.2b

v1.0.3

v1.0.4

v1.0.4-pre1

v1.0.4-pre2

v1.0.4-pre3

v1.0.4c

v1.0.4d

v1.0.4d2

v1.0.4e

v1.0.4f

v1.0.5

v1.0.5-pre1

v1.0.5a

v1.0.5c

v1.0.5d

v1.0.5h

v1.0.5q

v1.0.5s

v1.0.6

v1.0.6a

v1.0.6d

v1.0.6e

v1.0.6f

v1.0.6g

v1.0.6h

v1.0.6i

v1.0.6j

v1.0.7

v1.0.7beta11

v1.0.7beta12

v1.0.7beta13

v1.0.7beta14

v1.0.7beta15

v1.0.7beta16

v1.0.7beta17

v1.0.7beta18

v1.0.7rc1

v1.0.7rc2

v1.0.8

v1.0.8beta1

v1.0.8beta2

v1.0.8beta3

v1.0.8beta4

v1.0.8rc1

v1.0.9

v1.0.9beta1

v1.0.9beta10

v1.0.9beta2

v1.0.9beta3

v1.0.9beta4

v1.0.9beta5

v1.0.9beta6

v1.0.9beta7

v1.0.9beta8

v1.0.9beta9

v1.0.9rc1

v1.0.9rc2

v1.00

v1.2.0

v1.2.0beta1

v1.2.0beta2

v1.2.0beta3

v1.2.0beta4

v1.2.0beta5

v1.2.0rc1

v1.2.1

v1.2.10

v1.2.10beta1

v1.2.10beta2

v1.2.10beta3

v1.2.10beta4

v1.2.10beta5

v1.2.10beta6

v1.2.10beta7

v1.2.10rc1

v1.2.10rc2

v1.2.10rc3

v1.2.11

v1.2.11beta1

v1.2.11beta2

v1.2.11beta2cos

v1.2.11beta3

v1.2.11beta4

v1.2.11rc1

v1.2.11rc2

v1.2.11rc3

v1.2.11rc5

v1.2.12

v1.2.13

v1.2.13beta1

v1.2.13rc1

v1.2.13rc2

v1.2.14

v1.2.14beta1

v1.2.14beta2

v1.2.14rc1

v1.2.15

v1.2.15beta1

v1.2.15beta2

v1.2.15beta3

v1.2.15beta4

v1.2.15beta5

v1.2.15beta6

v1.2.15rc1

v1.2.15rc2

v1.2.15rc3

v1.2.15rc4

v1.2.15rc5

v1.2.16

v1.2.16beta1

v1.2.16beta2

v1.2.16rc1

v1.2.17

v1.2.17beta1

v1.2.17beta2

v1.2.17rc1

v1.2.17rc2

v1.2.17rc3

v1.2.17rc4

v1.2.18

v1.2.19

v1.2.19beta1

v1.2.19beta10

v1.2.19beta11

v1.2.19beta12

v1.2.19beta13

v1.2.19beta14

v1.2.19beta15

v1.2.19beta16

v1.2.19beta17

v1.2.19beta18

v1.2.19beta19

v1.2.19beta2

v1.2.19beta20

v1.2.19beta21

v1.2.19beta22

v1.2.19beta23

v1.2.19beta24

v1.2.19beta25

v1.2.19beta26

v1.2.19beta27

v1.2.19beta28

v1.2.19beta29

v1.2.19beta3

v1.2.19beta30

v1.2.19beta31

v1.2.19beta4

v1.2.19beta5

v1.2.19beta6

v1.2.19beta7

v1.2.19beta8

v1.2.19beta9

v1.2.19rc1

v1.2.19rc2

v1.2.19rc3

v1.2.19rc4

v1.2.19rc5

v1.2.19rc6

v1.2.1beta1

v1.2.1beta2

v1.2.1beta3

v1.2.1beta4

v1.2.1rc1

v1.2.1rc2

v1.2.2

v1.2.20

v1.2.20beta01

v1.2.20beta02

v1.2.20beta03

v1.2.20beta04

v1.2.20rc1

v1.2.20rc2

v1.2.20rc3

v1.2.20rc4

v1.2.20rc5

v1.2.20rc6

v1.2.21

v1.2.21beta1

v1.2.21beta2

v1.2.21rc1

v1.2.21rc2

v1.2.21rc3

v1.2.22

v1.2.22beta1

v1.2.22beta2

v1.2.22beta3

v1.2.22beta4

v1.2.22rc1

v1.2.23

v1.2.23beta01

v1.2.23beta02

v1.2.23beta03

v1.2.23beta04

v1.2.23beta05

v1.2.23rc01

v1.2.24

v1.2.24beta01

v1.2.24beta02

v1.2.24rc01

v1.2.25

v1.2.25beta01

v1.2.25beta02

v1.2.25beta03

v1.2.25beta04

v1.2.25beta05

v1.2.25beta06

v1.2.25rc01

v1.2.25rc02

v1.2.26

v1.2.26beta01

v1.2.26beta02

v1.2.26beta03

v1.2.26beta04

v1.2.26beta05

v1.2.26beta06

v1.2.26rc01

v1.2.27

v1.2.27beta01

v1.2.27beta02

v1.2.27beta03

v1.2.27beta04

v1.2.27beta05

v1.2.27beta06

v1.2.27rc01

v1.2.28

v1.2.29

v1.2.29beta01

v1.2.29beta02

v1.2.29beta03

v1.2.29rc01

v1.2.2beta1

v1.2.2beta2

v1.2.2beta3

v1.2.2beta4

v1.2.2beta5

v1.2.2beta6

v1.2.2rc1

v1.2.3

v1.2.30

v1.2.30beta01

v1.2.30beta02

v1.2.30beta03

v1.2.30beta04

v1.2.30rc01

v1.2.30rc02

v1.2.30rc03

v1.2.30rc04

v1.2.30rc05

v1.2.30rc06

v1.2.30rc07

v1.2.30rc08

v1.2.31

v1.2.31rc01

v1.2.31rc02

v1.2.31rc03

v1.2.32

v1.2.32beta01

v1.2.32rc01

v1.2.33

v1.2.33beta01

v1.2.33rc01

v1.2.33rc02

v1.2.34

v1.2.34beta01

v1.2.34beta02

v1.2.34beta03

v1.2.34beta04

v1.2.34beta05

v1.2.34beta06

v1.2.34beta07

v1.2.34rc01

v1.2.35

v1.2.35beta01

v1.2.35beta02

v1.2.35beta03

v1.2.35rc01

v1.2.35rc02

v1.2.36

v1.2.36beta01

v1.2.36beta02

v1.2.36beta03

v1.2.36beta04

v1.2.36beta05

v1.2.37

v1.2.37beta01

v1.2.37beta02

v1.2.37beta03

v1.2.37rc01

v1.2.38

v1.2.38beta01

v1.2.38rc01

v1.2.38rc02

v1.2.38rc03

v1.2.39

v1.2.39beta01

v1.2.39beta02

v1.2.39beta03

v1.2.39beta04

v1.2.39beta05

v1.2.39rc01

v1.2.3rc1

v1.2.3rc2

v1.2.3rc3

v1.2.3rc4

v1.2.3rc5

v1.2.3rc6

v1.2.4

v1.2.40

v1.2.40beta01

v1.2.40rc01

v1.2.41

v1.2.41beta01

v1.2.41beta02

v1.2.41beta03

v1.2.41beta04

v1.2.41beta05

v1.2.41beta06

v1.2.41beta07

v1.2.41beta08

v1.2.41beta09

v1.2.41beta10

v1.2.41beta11

v1.2.41beta12

v1.2.41beta13

v1.2.41beta14

v1.2.41beta15

v1.2.41beta16

v1.2.41beta17

v1.2.41beta18

v1.2.41beta19

v1.2.41rc01

v1.2.41rc02

v1.2.41rc03

v1.2.42

v1.2.42beta01

v1.2.42beta02

v1.2.42rc01

v1.2.42rc02

v1.2.42rc03

v1.2.42rc04

v1.2.42rc05

v1.2.4beta1

v1.2.4beta2

v1.2.4beta3

v1.2.4rc1

v1.2.5

v1.2.5beta1

v1.2.5beta2

v1.2.5rc1

v1.2.5rc2

v1.2.5rc3

v1.2.6

v1.2.6beta1

v1.2.6beta2

v1.2.6beta3

v1.2.6beta4

v1.2.6rc1

v1.2.6rc2

v1.2.6rc3

v1.2.6rc4

v1.2.6rc5

v1.2.7

v1.2.7beta1

v1.2.7beta2

v1.2.7rc1

v1.2.8

v1.2.8beta1

v1.2.8beta2

v1.2.8beta3

v1.2.8beta4

v1.2.8beta5

v1.2.8rc1

v1.2.8rc2

v1.2.8rc3

v1.2.8rc4

v1.2.8rc5

v1.2.9

v1.2.9beta1

v1.2.9beta10

v1.2.9beta11

v1.2.9beta2

v1.2.9beta3

v1.2.9beta4

v1.2.9beta5

v1.2.9beta6

v1.2.9beta7

v1.2.9beta8

v1.2.9beta9

v1.2.9rc1

v1.4.0

v1.4.0beta1

v1.4.0beta10

v1.4.0beta100

v1.4.0beta101

v1.4.0beta102

v1.4.0beta104

v1.4.0beta105

v1.4.0beta106

v1.4.0beta107

v1.4.0beta108

v1.4.0beta109

v1.4.0beta11

v1.4.0beta12

v1.4.0beta13

v1.4.0beta14

v1.4.0beta15

v1.4.0beta16

v1.4.0beta17

v1.4.0beta18

v1.4.0beta19

v1.4.0beta2

v1.4.0beta20

v1.4.0beta21

v1.4.0beta22

v1.4.0beta23

v1.4.0beta24

v1.4.0beta25

v1.4.0beta26

v1.4.0beta27

v1.4.0beta28

v1.4.0beta29

v1.4.0beta3

v1.4.0beta30

v1.4.0beta31

v1.4.0beta32

v1.4.0beta33

v1.4.0beta34

v1.4.0beta35

v1.4.0beta36

v1.4.0beta37

v1.4.0beta38

v1.4.0beta39

v1.4.0beta4

v1.4.0beta40

v1.4.0beta41

v1.4.0beta42

v1.4.0beta43

v1.4.0beta44

v1.4.0beta45

v1.4.0beta46

v1.4.0beta47

v1.4.0beta48

v1.4.0beta49

v1.4.0beta5

v1.4.0beta50

v1.4.0beta51

v1.4.0beta52

v1.4.0beta53

v1.4.0beta54

v1.4.0beta55

v1.4.0beta56

v1.4.0beta57

v1.4.0beta58

v1.4.0beta6

v1.4.0beta60

v1.4.0beta61

v1.4.0beta62

v1.4.0beta63

v1.4.0beta64

v1.4.0beta65

v1.4.0beta66

v1.4.0beta67

v1.4.0beta68

v1.4.0beta69

v1.4.0beta7

v1.4.0beta70

v1.4.0beta71

v1.4.0beta73

v1.4.0beta75

v1.4.0beta76

v1.4.0beta77

v1.4.0beta78

v1.4.0beta79

v1.4.0beta8

v1.4.0beta80

v1.4.0beta81

v1.4.0beta82

v1.4.0beta83

v1.4.0beta84

v1.4.0beta85

v1.4.0beta86

v1.4.0beta87

v1.4.0beta89

v1.4.0beta9

v1.4.0beta90

v1.4.0beta91

v1.4.0beta92

v1.4.0beta93

v1.4.0beta94

v1.4.0beta95

v1.4.0beta96

v1.4.0beta98

v1.4.0beta99

v1.4.0rc03

v1.4.0rc04

v1.4.0rc05

v1.4.0rc06

v1.4.0rc07

v1.4.0rc08

v1.4.1

v1.4.1beta01

v1.4.1beta02

v1.4.1beta03

v1.4.1beta04

v1.4.1beta05

v1.4.1beta06

v1.4.1beta07

v1.4.1beta08

v1.4.1beta09

v1.4.1beta10

v1.4.1beta11

v1.4.1beta12

v1.4.1rc01

v1.4.1rc02

v1.4.1rc03

v1.4.1rc04

v1.4.2

v1.4.2beta01

v1.4.2rc01

v1.4.2rc02

v1.4.2rc03

v1.4.2rc04

v1.4.2rc05

v1.4.2rc06

v1.4.3

v1.4.3beta01

v1.4.3beta02

v1.4.3beta04

v1.4.3beta05

v1.4.3rc01

v1.4.3rc02

v1.4.3rc03

v1.4.4

v1.4.4beta01

v1.4.4beta02

v1.4.4beta03

v1.4.4beta05

v1.4.4beta06

v1.4.4beta07

v1.4.4beta08

v1.4.4rc01

v1.4.4rc02

v1.4.4rc03

v1.4.4rc04

v1.4.4rc05

v1.4.5

v1.4.5beta01

v1.4.5beta02

v1.4.5beta03

v1.4.5beta04

v1.4.5beta06

v1.4.5rc01

v1.4.5rc02

v1.4.5rc03

v1.4.6

v1.4.6beta01

v1.4.6beta03

v1.4.6beta04

v1.4.6beta06

v1.4.6beta07

v1.4.6rc01

v1.4.6rc02

v1.4.7

v1.4.7rc01

v1.4.8

v1.4.8beta01

v1.4.8beta02

v1.4.8beta03

v1.4.8beta04

v1.4.8beta05

v1.4.8rc01

v1.5.0

v1.5.0beta01

v1.5.0beta02

v1.5.0beta03

v1.5.0beta04

v1.5.0beta05

v1.5.0beta06

v1.5.0beta07

v1.5.0beta08

v1.5.0beta09

v1.5.0beta11

v1.5.0beta12

v1.5.0beta13

v1.5.0beta14

v1.5.0beta15

v1.5.0beta16

v1.5.0beta17

v1.5.0beta18

v1.5.0beta19

v1.5.0beta20

v1.5.0beta21

v1.5.0beta22

v1.5.0beta23

v1.5.0beta24

v1.5.0beta25

v1.5.0beta26

v1.5.0beta27

v1.5.0beta28

v1.5.0beta29

v1.5.0beta30

v1.5.0beta31

v1.5.0beta32

v1.5.0beta33

v1.5.0beta34

v1.5.0beta35

v1.5.0beta36

v1.5.0beta37

v1.5.0beta38

v1.5.0beta39

v1.5.0beta40

v1.5.0beta41

v1.5.0beta42

v1.5.0beta43

v1.5.0beta44

v1.5.0beta45

v1.5.0beta46

v1.5.0beta47

v1.5.0beta48

v1.5.0beta49

v1.5.0beta50

v1.5.0beta51

v1.5.0beta52

v1.5.0beta53

v1.5.0beta54

v1.5.0beta55

v1.5.0beta56

v1.5.0beta57

v1.5.0beta58

v1.5.0rc01

v1.5.0rc02

v1.5.0rc03

v1.5.0rc05

v1.5.0rc06

v1.5.1

v1.5.1beta01

v1.5.1beta02

v1.5.1beta03

v1.5.1beta04

v1.5.1beta05

v1.5.1beta06

v1.5.1beta07

v1.5.1beta08

v1.5.1beta09

v1.5.1beta10

v1.5.1beta11

v1.5.1rc01

v1.5.1rc02

v1.5.2

v1.5.2beta01

v1.5.2beta02

v1.5.2beta03

v1.5.2rc01

v1.5.2rc02

v1.5.2rc03

v1.5.3beta01

v1.5.3beta02

v1.5.3beta03

v1.5.3beta05

v1.5.3beta06

v1.5.3beta07

v1.5.3beta08

v1.5.3beta09

v1.5.3beta10

v1.5.3beta11

v1.5.3rc01

v1.5.3rc02

v1.5.4

v1.5.4beta01

v1.5.4beta02

v1.5.4beta03

v1.5.4beta04

v1.5.4beta05

v1.5.4beta06

v1.5.4beta07

v1.5.4beta08

v1.5.4rc01

v1.5.5

v1.5.5beta01

v1.5.5beta02

v1.5.5beta03

v1.5.5beta04

v1.5.5beta05

v1.5.5beta06

v1.5.5beta07

v1.5.5beta08

v1.5.5rc01

v1.5.6

v1.5.6beta01

v1.5.6beta02

v1.5.6beta03

v1.5.6beta04

v1.5.6beta05

v1.5.6beta06

v1.5.6beta07

v1.5.6rc01

v1.5.6rc02

v1.5.6rc03

v1.5.7

v1.5.7beta01

v1.5.7beta02

v1.5.7beta03

v1.5.7beta04

v1.5.7beta05

v1.5.7rc01

v1.5.7rc02

v1.5.7rc03

v1.5.8beta01

v1.5.8rc02

v1.5.9

v1.5.9beta01

v1.5.9rc01

v1.6.0

v1.6.0beta01

v1.6.0beta02

v1.6.0beta03

v1.6.0beta04

v1.6.0beta05

v1.6.0beta06

v1.6.0beta07

v1.6.0beta08

v1.6.0beta09

v1.6.0beta10

v1.6.0beta11

v1.6.0beta12

v1.6.0beta13

v1.6.0beta14

v1.6.0beta15

v1.6.0beta16

v1.6.0beta17

v1.6.0beta18

v1.6.0beta19

v1.6.0beta21

v1.6.0beta22

v1.6.0beta23

v1.6.0beta24

v1.6.0beta25

v1.6.0beta26

v1.6.0beta27

v1.6.0beta28

v1.6.0beta29

v1.6.0beta30

v1.6.0beta31

v1.6.0beta32

v1.6.0beta33

v1.6.0beta34

v1.6.0beta35

v1.6.0beta36

v1.6.0beta37

v1.6.0beta38

v1.6.0beta39

v1.6.0beta40

v1.6.0rc01

v1.6.0rc02

v1.6.0rc03

v1.6.0rc04

v1.6.0rc05

v1.6.0rc06

v1.6.0rc07

v1.6.0rc08

v1.6.1

v1.6.10

v1.6.10beta01

v1.6.10beta02

v1.6.10rc01

v1.6.10rc02

v1.6.10rc03

v1.6.11

v1.6.11beta01

v1.6.11beta02

v1.6.11beta03

v1.6.11beta04

v1.6.11beta05

v1.6.11beta06

v1.6.11rc01

v1.6.11rc02

v1.6.12

v1.6.12rc01

v1.6.12rc02

v1.6.12rc03

v1.6.13

v1.6.13beta01

v1.6.13beta02

v1.6.13beta03

v1.6.13beta04

v1.6.13rc01

v1.6.14

v1.6.14beta01

v1.6.14beta02

v1.6.14beta03

v1.6.14beta04

v1.6.14beta05

v1.6.14beta06

v1.6.14beta07

v1.6.14rc01

v1.6.14rc02

v1.6.15

v1.6.15beta01

v1.6.15beta02

v1.6.15beta03

v1.6.15beta04

v1.6.15beta05

v1.6.15beta06

v1.6.15beta07

v1.6.15beta08

v1.6.15rc01

v1.6.15rc02

v1.6.15rc03

v1.6.16

v1.6.16beta01

v1.6.16beta02

v1.6.16beta03

v1.6.16rc01

v1.6.16rc02

v1.6.16rc03

v1.6.17

v1.6.17-master

v1.6.17beta01

v1.6.17beta02

v1.6.17beta03

v1.6.17beta04

v1.6.17beta05

v1.6.17rc01

v1.6.17rc02

v1.6.17rc03

v1.6.17rc04

v1.6.17rc05

v1.6.17rc06

v1.6.18

v1.6.18-master

v1.6.18beta01

v1.6.18beta02

v1.6.18beta03

v1.6.18beta04

v1.6.18beta05

v1.6.18beta06

v1.6.18beta07

v1.6.18beta08

v1.6.18beta09

v1.6.18rc01

v1.6.18rc02

v1.6.18rc03

v1.6.19

v1.6.19beta01

v1.6.19beta02

v1.6.19beta03

v1.6.19beta04

v1.6.19rc01

v1.6.19rc02

v1.6.19rc03

v1.6.19rc04

v1.6.1beta01

v1.6.1beta02

v1.6.1beta03

v1.6.1beta04

v1.6.1beta05

v1.6.1beta06

v1.6.1beta07

v1.6.1beta08

v1.6.1beta09

v1.6.1rc01

v1.6.2

v1.6.20beta01

v1.6.20beta02

v1.6.20beta03

v1.6.20rc01

v1.6.20rc02

v1.6.21

v1.6.21beta01

v1.6.21beta02

v1.6.21beta03

v1.6.21rc01

v1.6.21rc02

v1.6.22

v1.6.22beta01

v1.6.22beta02

v1.6.22beta03

v1.6.22beta04

v1.6.22beta05

v1.6.22beta06

v1.6.22rc01

v1.6.22rc02

v1.6.22rc03

v1.6.23

v1.6.23beta01

v1.6.23rc01

v1.6.23rc02

v1.6.24

v1.6.24beta01

v1.6.24beta02

v1.6.24beta03

v1.6.24beta04

v1.6.24beta05

v1.6.24beta06

v1.6.24rc01

v1.6.24rc02

v1.6.24rc03

v1.6.25

v1.6.25beta02

v1.6.25rc03

v1.6.25rc04

v1.6.26

v1.6.26beta01

v1.6.26beta02

v1.6.26beta03

v1.6.26beta04

v1.6.26beta05

v1.6.26beta06

v1.6.26rc01

v1.6.27

v1.6.27beta01

v1.6.27rc01

v1.6.28

v1.6.28rc01

v1.6.28rc02

v1.6.28rc03

v1.6.29

v1.6.29beta01

v1.6.29beta02

v1.6.29beta03

v1.6.29rc01

v1.6.2beta01

v1.6.2beta02

v1.6.2rc01

v1.6.2rc02

v1.6.2rc03

v1.6.2rc04

v1.6.2rc05

v1.6.2rc06

v1.6.3

v1.6.30

v1.6.30beta01

v1.6.30beta02

v1.6.30beta03

v1.6.30beta04

v1.6.30rc01

v1.6.31

v1.6.31beta01

v1.6.31beta02

v1.6.31beta03

v1.6.31beta04

v1.6.31beta05

v1.6.31beta06

v1.6.31beta07

v1.6.31rc01

v1.6.31rc02

v1.6.32

v1.6.32beta01

v1.6.32beta02

v1.6.32beta03

v1.6.32beta05

v1.6.32beta06

v1.6.32beta07

v1.6.32beta08

v1.6.32beta09

v1.6.32beta10

v1.6.32beta11

v1.6.32rc01

v1.6.32rc02

v1.6.33

v1.6.33beta01

v1.6.33beta02

v1.6.33beta03

v1.6.33rc01

v1.6.33rc02

v1.6.34

v1.6.35

v1.6.35beta01

v1.6.36

v1.6.37

v1.6.38

v1.6.39

v1.6.3beta01

v1.6.3beta02

v1.6.3beta03

v1.6.3beta04

v1.6.3beta05

v1.6.3beta06

v1.6.3beta07

v1.6.3beta08

v1.6.3beta09

v1.6.3beta10

v1.6.3rc01

v1.6.4

v1.6.40

v1.6.41

v1.6.42

v1.6.43

v1.6.44

v1.6.45

v1.6.46

v1.6.47

v1.6.48

v1.6.49

v1.6.4beta02

v1.6.4rc01

v1.6.5

v1.6.50

v1.6.51

v1.6.6

v1.6.7

v1.6.7beta01

v1.6.7beta02

v1.6.7beta03

v1.6.7beta04

v1.6.7rc01

v1.6.7rc02

v1.6.8

v1.6.8beta01

v1.6.8beta02

v1.6.8rc02

v1.6.9

v1.6.9beta01

v1.6.9beta02

v1.6.9beta03

v1.6.9rc01

v1.6.9rc02

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "226278435900183309042818230187401432350",
                "87133448745501730107989263351817388797",
                "261504106203917971632436042185650635174",
                "96915034627752997194399565987887230236"
            ]
        },
        "id": "CVE-2025-66293-1c0bb128",
        "source": "https://github.com/glennrp/libpng/commit/fbed16182b92eeb3a06d96e49f0836d450318098",
        "signature_type": "Line",
        "target": {
            "file": "pngtest.c"
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "digest": {
            "length": 481.0,
            "function_hash": "46948716049554014172244892925593370708"
        },
        "id": "CVE-2025-66293-20c85e04",
        "source": "https://github.com/glennrp/libpng/commit/fbed16182b92eeb3a06d96e49f0836d450318098",
        "signature_type": "Function",
        "target": {
            "file": "png.c",
            "function": "png_get_copyright"
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "47073152949364962369861090096126731773",
                "288151299466246462167992061204006899761",
                "210305172250034716953159367551327640319",
                "269186107582912240335944251486659581364",
                "208708600996260486851797060700199558941",
                "98942535793701360371500714449713090723"
            ]
        },
        "id": "CVE-2025-66293-6680835f",
        "source": "https://github.com/glennrp/libpng/commit/fbed16182b92eeb3a06d96e49f0836d450318098",
        "signature_type": "Line",
        "target": {
            "file": "png.c"
        },
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "166375070723291529406421301066248769034",
                "275647010778297936193963675511576832388",
                "256826767335212246520616614652191899280",
                "279336807821086835335477021495116274772",
                "203183669222293599460722964148178217304",
                "35307519453120089155494266760457606742",
                "19174725693447036515934418080443497527",
                "52554931054347631511668834753074918781"
            ]
        },
        "id": "CVE-2025-66293-8fe70a24",
        "source": "https://github.com/glennrp/libpng/commit/fbed16182b92eeb3a06d96e49f0836d450318098",
        "signature_type": "Line",
        "target": {
            "file": "png.h"
        },
        "signature_version": "v1",
        "deprecated": false
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66293.json"

Git / github.com/pnggroup/libpng