Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function.(CVE-2025-28164)

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually     leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the     png_set_quantize() API function. When the function is called with no histogram and the number of colors in     the palette is more than twice the maximum supported by the user's display, certain palettes will cause     the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer.
    The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is     fixed in 1.6.55.(CVE-2026-25646)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libpng security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually     leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function.(CVE-2025-28164)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the     libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit     output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018.
    This vulnerability is fixed in 1.6.54.(CVE-2026-22695)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng     simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read     when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535     bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings     on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the     png_set_quantize() API function. When the function is called with no histogram and the number of colors in     the palette is more than twice the maximum supported by the user's display, certain palettes will cause     the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer.
    The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is     fixed in 1.6.55.(CVE-2026-25646)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libpng security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng     simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read     when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535     bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings     on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the     libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit     output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018.
    This vulnerability is fixed in 1.6.54.(CVE-2026-22695)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's     simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid     palette PNG images with partial transparency and gamma correction. The PNG files that trigger this     vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.
    Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the     png_set_quantize() API function. When the function is called with no histogram and the number of colors in     the palette is more than twice the maximum supported by the user's display, certain palettes will cause     the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer.
    The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is     fixed in 1.6.55.(CVE-2026-25646)

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function.(CVE-2025-28164)

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually     leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libpng security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015447 advisory.

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0596-1 advisory.

    - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364).
    - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365).
    - CVE-2026-22695: heap buffer over-read in png_image_finish_read (bsc#1256525).
    - CVE-2026-22801: integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
    - CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1440 advisory.

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually     leading to high memory usage and causing the program to become unresponsive (CVE-2025-28162)

    Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function. (CVE-2025-28164)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0364-1 advisory.

    - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364).
    - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365).
    - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7993-1 advisory.

    It was discovered that libpng incorrectly handled memory when processing certain malformed PNG files. If a     user or automated system were tricked into opening a specially crafted PNG file, an attacker could use     this issue to cause libpng to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service     via png_create_read_struct() function. (CVE-2025-28164)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
319482	EulerOS Virtualization 2.12.1 : libpng (EulerOS-SA-2026-2079)	Nessus	Huawei Local Security Checks	high
319439	EulerOS Virtualization 2.10.0 : libpng (EulerOS-SA-2026-2052)	Nessus	Huawei Local Security Checks	high
319412	EulerOS Virtualization 2.13.1 : libpng (EulerOS-SA-2026-2135)	Nessus	Huawei Local Security Checks	high
319367	EulerOS Virtualization 2.10.1 : libpng (EulerOS-SA-2026-2025)	Nessus	Huawei Local Security Checks	high
319351	EulerOS Virtualization 2.13.0 : libpng (EulerOS-SA-2026-2174)	Nessus	Huawei Local Security Checks	high
319316	EulerOS Virtualization 2.12.0 : libpng (EulerOS-SA-2026-2104)	Nessus	Huawei Local Security Checks	high
310853	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng (UTSA-2026-015447)	Nessus	Unity Linux Local Security Checks	medium
299850	SUSE SLES15 Security Update : libpng16 (SUSE-SU-2026:0596-1)	Nessus	SuSE Local Security Checks	high
299550	Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2026-1440)	Nessus	Amazon Linux Local Security Checks	medium
297833	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libpng16 (SUSE-SU-2026:0364-1)	Nessus	SuSE Local Security Checks	medium
297658	Ubuntu 24.04 LTS : libpng vulnerabilities (USN-7993-1)	Nessus	Ubuntu Local Security Checks	medium
296928	Linux Distros Unpatched Vulnerability : CVE-2025-28164	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-28164

medium

Tenable Plugins

high

high

high

high

high

high

medium

high

medium

medium

medium

medium