CVE-2025-64506: LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
Overview
- Severity
- Medium (CVSS 6.1)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2025-Nov
- Released
- 2025-11-27
- Last Updated
- 2025-12-03
- EPSS Score
- 0.03% (percentile: 7.3%)
Affected Products (6)
Other
- 20674-17084
- 17667-17084
- 18435-17086
- 19626-17084
- 20185-17086
- 19668-17086
Revision History
- 2025-11-27: Information published.
- 2025-12-02: Information published.
- 2025-12-03: Information published.