Vulnerability-Lookup

CVE-2025-64505 (GCVE-0-2025-64505)

Vulnerability from cvelistv5 – Published: 2025-11-24 23:38 – Updated: 2025-11-25 18:55

Title

LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index

Summary

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/pnggroup/libpng/security/advis…	x_refsource_CONFIRM
https://github.com/pnggroup/libpng/pull/748	x_refsource_MISC
https://github.com/pnggroup/libpng/commit/6a528eb…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pnggroup	libpng	Affected: < 1.6.51

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-64505",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-25T18:55:44.084881Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-25T18:55:50.619Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libpng",
          "vendor": "pnggroup",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.51"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-24T23:38:40.405Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42"
        },
        {
          "name": "https://github.com/pnggroup/libpng/pull/748",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pnggroup/libpng/pull/748"
        },
        {
          "name": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37"
        }
      ],
      "source": {
        "advisory": "GHSA-4952-h5wq-4m42",
        "discovery": "UNKNOWN"
      },
      "title": "LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-64505",
    "datePublished": "2025-11-24T23:38:40.405Z",
    "dateReserved": "2025-11-05T19:12:25.104Z",
    "dateUpdated": "2025-11-25T18:55:50.619Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-64505",
      "date": "2026-06-03",
      "epss": "0.00014",
      "percentile": "0.02523"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-64505\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2025-11-25T00:15:47.133\",\"lastModified\":\"2025-11-26T18:28:32.220\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":4.2}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.6.51\",\"matchCriteriaId\":\"A8B5D980-7DA8-4291-8723-4CDDF73B19F6\"}]}]}],\"references\":[{\"url\":\"https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/pnggroup/libpng/pull/748\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-64505\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-11-25T18:55:44.084881Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-11-25T18:55:48.097Z\"}}], \"cna\": {\"title\": \"LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index\", \"source\": {\"advisory\": \"GHSA-4952-h5wq-4m42\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"vendor\": \"pnggroup\", \"product\": \"libpng\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 1.6.51\"}]}], \"references\": [{\"url\": \"https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42\", \"name\": \"https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/pnggroup/libpng/pull/748\", \"name\": \"https://github.com/pnggroup/libpng/pull/748\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37\", \"name\": \"https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2025-11-24T23:38:40.405Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-64505\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-25T18:55:50.619Z\", \"dateReserved\": \"2025-11-05T19:12:25.104Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2025-11-24T23:38:40.405Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

NCSC-2026-0101

Vulnerability from csaf_ncscnl - Published: 2026-03-25 14:02 - Updated: 2026-03-25 14:02

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.

Interpretaties: De kwetsbaarheden omvatten verschillende problemen zoals onjuist padbeheer, geheugenbeheer, en onvoldoende validatie van invoer, die konden leiden tot ongeautoriseerde toegang tot gevoelige gegevens, onverwachte applicatie-terminaties, en andere beveiligingsrisico's. Aanvallers kunnen deze kwetsbaarheden misbruiken door bijvoorbeeld kwaadaardige webinhoud te verwerken of door gebruik te maken van onvoldoende beveiligde applicaties. De kwetsbaarheden zijn opgelost door verbeterde validatie- en beveiligingsmechanismen in de betrokken besturingssystemen.

Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

CWE-125: Out-of-bounds Read

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-275: Permission Issues

CWE-287: Improper Authentication

CWE-371: State Issues

CWE-404: Improper Resource Shutdown or Release

CWE-416: Use After Free

CWE-476: NULL Pointer Dereference

CWE-522: Insufficiently Protected Credentials

CWE-532: Insertion of Sensitive Information into Log File

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CVE-2025-14524

A vulnerability in libcurl versions 7.33.0 to 8.17.0 causes OAuth2 bearer tokens to be unintentionally leaked during cross-protocol redirects involving IMAP, LDAP, POP3, or SMTP schemes, potentially exposing sensitive information.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-522 - Insufficiently Protected Credentials

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2025-43376

A logic issue affecting state management in multiple Apple OS versions was fixed to prevent remote attackers from viewing leaked DNS queries when Private Relay is enabled.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2025-43534

An improved validation fixed a path handling vulnerability in iOS 18.7.7, iPadOS 18.7.7, iOS 26.2, and iPadOS 26.2 that could allow a user with physical access to bypass Activation Lock.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2025-64505

Multiple vulnerabilities in libpng, including heap buffer overflows and over-reads in functions like png_do_quantize, affect various products including NetApp and Apple software, alongside a separate Oracle MySQL Workbench flaw allowing unauthorized data modification or denial of service.

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20657

Improved memory handling in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5 fixed an issue where parsing a maliciously crafted file could cause unexpected app termination.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20665

Apple fixed a vulnerability in multiple operating systems and Safari versions 26.4 and iOS/iPadOS 18.7.7 where malicious web content could bypass Content Security Policy enforcement due to improper state management.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20668

A logging issue affecting iOS, iPadOS, macOS, and visionOS was fixed by enhancing data redaction to prevent apps from accessing sensitive user information.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20687

A use after free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing to kernel memory.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20688

A path handling vulnerability allowing applications to potentially escape their sandbox was fixed through improved validation in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, and visionOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20690

An out-of-bounds access vulnerability in Apple operating systems was fixed by improving bounds checking to prevent process termination caused by maliciously crafted audio streams.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20691

An authorization vulnerability in Safari 26.4 and related OS versions was resolved by enhancing state management to prevent malicious webpages from fingerprinting users.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20692

A privacy issue affecting user preferences for mail content handling, specifically the 'Hide IP Address' and 'Block All Remote Content' features, was fixed in iOS 26.4, iPadOS 26.4, and various macOS versions.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-20698

A memory handling vulnerability in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4 could allow an app to cause unexpected system termination or kernel memory corruption, which was resolved through improved memory management.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28822

A type confusion vulnerability related to memory handling in multiple Apple operating systems could allow an attacker to cause unexpected application termination.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28833

A permissions issue allowing apps to enumerate a user’s installed applications was fixed by implementing additional restrictions in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28852

A stack overflow vulnerability allowing denial-of-service was fixed by improving input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28856

An authentication vulnerability allowing physical attackers to access sensitive user information on locked devices was fixed in iOS 26.4, iPadOS 26.4, visionOS 26.4, and watchOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28857

Improved memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4 fixed an issue where processing maliciously crafted web content could cause unexpected process crashes.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28858

A buffer overflow vulnerability in iOS 26.4 and iPadOS 26.4 was fixed by improved bounds checking to prevent remote system termination or kernel memory corruption.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28859

A memory handling vulnerability in Safari 26.4 and related OS versions was fixed, preventing malicious websites from processing restricted web content outside the sandbox environment.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28861

A logic issue in state management was fixed across multiple Apple operating systems to prevent malicious websites from accessing script message handlers intended for other origins.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28863

A permissions issue allowing apps to fingerprint users was fixed by adding restrictions in iOS 26.4, iPadOS 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28864

Apple addressed a vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS by enhancing permissions checks to prevent local attackers from accessing users' Keychain items.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28865

An authentication vulnerability in multiple Apple operating systems was addressed by improving state management to prevent attackers in privileged network positions from intercepting network traffic.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28866

Multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, and various macOS versions addressed a vulnerability where improper symlink validation allowed apps to access sensitive user data.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28867

A vulnerability allowing apps to potentially leak sensitive kernel state was fixed through improved authentication in multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, and macOS Sequoia 15.7.5.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28868

A logging issue in multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS was fixed by improving data redaction to prevent apps from disclosing kernel memory.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28870

An information leakage vulnerability allowing unauthorized access to sensitive user data was fixed through additional validation in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28871

A logic issue in Safari, iOS, iPadOS, and macOS was fixed through improved checks to prevent cross-site scripting attacks from malicious websites.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28874

iOS 26.4 and iPadOS 26.4 addressed an issue where improved validation checks prevent remote attackers from causing unexpected app termination.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28875

A buffer overflow vulnerability in iOS 26.4 and iPadOS 26.4 was fixed by implementing improved bounds checking to prevent remote denial-of-service attacks.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28876

A parsing issue in directory path handling was fixed by improving path validation across multiple OS versions to prevent unauthorized app access to sensitive user data.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28877

An authorization vulnerability allowing apps to potentially access sensitive user data was resolved by enhancing state management in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28878

Apple addressed a privacy vulnerability that allowed apps to enumerate installed applications by removing sensitive data in updates to iOS 18.7.7, iPadOS 18.7.7, macOS Sonoma 14.8.5, and other operating systems.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28879

A use-after-free vulnerability causing potential process crashes when handling malicious web content was fixed through improved memory management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28880

Multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS addressed a permissions issue by implementing additional restrictions to prevent apps from enumerating a user’s installed applications.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28882

An issue allowing apps to enumerate a user's installed applications was resolved through enhanced verification mechanisms in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28886

A null pointer dereference vulnerability allowing a privileged network user to cause denial-of-service was fixed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28894

A denial-of-service vulnerability in iOS 26.4, iPadOS 26.4, and multiple macOS versions was addressed by improved input validation to prevent remote attackers from causing service disruptions.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

CVE-2026-28895

iOS and iPadOS 16.4 fixed a vulnerability allowing attackers with physical access to bypass biometrics-gated Protected Apps by using the passcode on devices with Stolen Device Protection enabled through improved verification checks.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Apple / iOS		vers:unknown/*
vers:unknown/* Apple / iPadOS		vers:unknown/*

References

42 references

URL	Category
https://support.apple.com/en-us/126792	external
https://support.apple.com/en-us/126793	external
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten verschillende problemen zoals onjuist padbeheer, geheugenbeheer, en onvoldoende validatie van invoer, die konden leiden tot ongeautoriseerde toegang tot gevoelige gegevens, onverwachte applicatie-terminaties, en andere beveiligingsrisico\u0027s. Aanvallers kunnen deze kwetsbaarheden misbruiken door bijvoorbeeld kwaadaardige webinhoud te verwerken of door gebruik te maken van onvoldoende beveiligde applicaties. De kwetsbaarheden zijn opgelost door verbeterde validatie- en beveiligingsmechanismen in de betrokken besturingssystemen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Permission Issues",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      },
      {
        "category": "general",
        "text": "State Issues",
        "title": "CWE-371"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Insufficiently Protected Credentials",
        "title": "CWE-522"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information into Log File",
        "title": "CWE-532"
      },
      {
        "category": "general",
        "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
        "title": "CWE-601"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/126792"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/126793"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
    "tracking": {
      "current_release_date": "2026-03-25T14:02:07.392994Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0101",
      "initial_release_date": "2026-03-25T14:02:07.392994Z",
      "revision_history": [
        {
          "date": "2026-03-25T14:02:07.392994Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14524",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficiently Protected Credentials",
          "title": "CWE-522"
        },
        {
          "category": "other",
          "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
          "title": "CWE-601"
        },
        {
          "category": "description",
          "text": "A vulnerability in libcurl versions 7.33.0 to 8.17.0 causes OAuth2 bearer tokens to be unintentionally leaked during cross-protocol redirects involving IMAP, LDAP, POP3, or SMTP schemes, potentially exposing sensitive information.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-14524 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-14524.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-14524"
    },
    {
      "cve": "CVE-2025-43376",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue affecting state management in multiple Apple OS versions was fixed to prevent remote attackers from viewing leaked DNS queries when Private Relay is enabled.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43376 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43376.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-43376"
    },
    {
      "cve": "CVE-2025-43534",
      "notes": [
        {
          "category": "description",
          "text": "An improved validation fixed a path handling vulnerability in iOS 18.7.7, iPadOS 18.7.7, iOS 26.2, and iPadOS 26.2 that could allow a user with physical access to bypass Activation Lock.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43534 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43534.json"
        }
      ],
      "title": "CVE-2025-43534"
    },
    {
      "cve": "CVE-2025-64505",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in libpng, including heap buffer overflows and over-reads in functions like png_do_quantize, affect various products including NetApp and Apple software, alongside a separate Oracle MySQL Workbench flaw allowing unauthorized data modification or denial of service.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-64505 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-64505.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2026-20657",
      "notes": [
        {
          "category": "description",
          "text": "Improved memory handling in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5 fixed an issue where parsing a maliciously crafted file could cause unexpected app termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20657 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20657.json"
        }
      ],
      "title": "CVE-2026-20657"
    },
    {
      "cve": "CVE-2026-20665",
      "notes": [
        {
          "category": "description",
          "text": "Apple fixed a vulnerability in multiple operating systems and Safari versions 26.4 and iOS/iPadOS 18.7.7 where malicious web content could bypass Content Security Policy enforcement due to improper state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20665 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20665.json"
        }
      ],
      "title": "CVE-2026-20665"
    },
    {
      "cve": "CVE-2026-20668",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue affecting iOS, iPadOS, macOS, and visionOS was fixed by enhancing data redaction to prevent apps from accessing sensitive user information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20668 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20668.json"
        }
      ],
      "title": "CVE-2026-20668"
    },
    {
      "cve": "CVE-2026-20687",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing to kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20687 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20687.json"
        }
      ],
      "title": "CVE-2026-20687"
    },
    {
      "cve": "CVE-2026-20688",
      "notes": [
        {
          "category": "description",
          "text": "A path handling vulnerability allowing applications to potentially escape their sandbox was fixed through improved validation in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, and visionOS 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20688 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20688.json"
        }
      ],
      "title": "CVE-2026-20688"
    },
    {
      "cve": "CVE-2026-20690",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access vulnerability in Apple operating systems was fixed by improving bounds checking to prevent process termination caused by maliciously crafted audio streams.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20690 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20690.json"
        }
      ],
      "title": "CVE-2026-20690"
    },
    {
      "cve": "CVE-2026-20691",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability in Safari 26.4 and related OS versions was resolved by enhancing state management to prevent malicious webpages from fingerprinting users.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20691 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20691.json"
        }
      ],
      "title": "CVE-2026-20691"
    },
    {
      "cve": "CVE-2026-20692",
      "notes": [
        {
          "category": "description",
          "text": "A privacy issue affecting user preferences for mail content handling, specifically the \u0027Hide IP Address\u0027 and \u0027Block All Remote Content\u0027 features, was fixed in iOS 26.4, iPadOS 26.4, and various macOS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20692 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20692.json"
        }
      ],
      "title": "CVE-2026-20692"
    },
    {
      "cve": "CVE-2026-20698",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4 could allow an app to cause unexpected system termination or kernel memory corruption, which was resolved through improved memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20698 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20698.json"
        }
      ],
      "title": "CVE-2026-20698"
    },
    {
      "cve": "CVE-2026-28822",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability related to memory handling in multiple Apple operating systems could allow an attacker to cause unexpected application termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28822 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28822.json"
        }
      ],
      "title": "CVE-2026-28822"
    },
    {
      "cve": "CVE-2026-28833",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue allowing apps to enumerate a user\u2019s installed applications was fixed by implementing additional restrictions in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28833 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28833.json"
        }
      ],
      "title": "CVE-2026-28833"
    },
    {
      "cve": "CVE-2026-28852",
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow vulnerability allowing denial-of-service was fixed by improving input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28852 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28852.json"
        }
      ],
      "title": "CVE-2026-28852"
    },
    {
      "cve": "CVE-2026-28856",
      "notes": [
        {
          "category": "description",
          "text": "An authentication vulnerability allowing physical attackers to access sensitive user information on locked devices was fixed in iOS 26.4, iPadOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28856 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28856.json"
        }
      ],
      "title": "CVE-2026-28856"
    },
    {
      "cve": "CVE-2026-28857",
      "notes": [
        {
          "category": "description",
          "text": "Improved memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4 fixed an issue where processing maliciously crafted web content could cause unexpected process crashes.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28857 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28857.json"
        }
      ],
      "title": "CVE-2026-28857"
    },
    {
      "cve": "CVE-2026-28858",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in iOS 26.4 and iPadOS 26.4 was fixed by improved bounds checking to prevent remote system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28858 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28858.json"
        }
      ],
      "title": "CVE-2026-28858"
    },
    {
      "cve": "CVE-2026-28859",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in Safari 26.4 and related OS versions was fixed, preventing malicious websites from processing restricted web content outside the sandbox environment.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28859 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28859.json"
        }
      ],
      "title": "CVE-2026-28859"
    },
    {
      "cve": "CVE-2026-28861",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue in state management was fixed across multiple Apple operating systems to prevent malicious websites from accessing script message handlers intended for other origins.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28861 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28861.json"
        }
      ],
      "title": "CVE-2026-28861"
    },
    {
      "cve": "CVE-2026-28863",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue allowing apps to fingerprint users was fixed by adding restrictions in iOS 26.4, iPadOS 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28863 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28863.json"
        }
      ],
      "title": "CVE-2026-28863"
    },
    {
      "cve": "CVE-2026-28864",
      "notes": [
        {
          "category": "description",
          "text": "Apple addressed a vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS by enhancing permissions checks to prevent local attackers from accessing users\u0027 Keychain items.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28864 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28864.json"
        }
      ],
      "title": "CVE-2026-28864"
    },
    {
      "cve": "CVE-2026-28865",
      "notes": [
        {
          "category": "description",
          "text": "An authentication vulnerability in multiple Apple operating systems was addressed by improving state management to prevent attackers in privileged network positions from intercepting network traffic.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28865 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28865.json"
        }
      ],
      "title": "CVE-2026-28865"
    },
    {
      "cve": "CVE-2026-28866",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, and various macOS versions addressed a vulnerability where improper symlink validation allowed apps to access sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28866 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28866.json"
        }
      ],
      "title": "CVE-2026-28866"
    },
    {
      "cve": "CVE-2026-28867",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially leak sensitive kernel state was fixed through improved authentication in multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, and macOS Sequoia 15.7.5.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28867 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28867.json"
        }
      ],
      "title": "CVE-2026-28867"
    },
    {
      "cve": "CVE-2026-28868",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue in multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS was fixed by improving data redaction to prevent apps from disclosing kernel memory.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28868 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28868.json"
        }
      ],
      "title": "CVE-2026-28868"
    },
    {
      "cve": "CVE-2026-28870",
      "notes": [
        {
          "category": "description",
          "text": "An information leakage vulnerability allowing unauthorized access to sensitive user data was fixed through additional validation in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28870 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28870.json"
        }
      ],
      "title": "CVE-2026-28870"
    },
    {
      "cve": "CVE-2026-28871",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue in Safari, iOS, iPadOS, and macOS was fixed through improved checks to prevent cross-site scripting attacks from malicious websites.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28871 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28871.json"
        }
      ],
      "title": "CVE-2026-28871"
    },
    {
      "cve": "CVE-2026-28874",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.4 and iPadOS 26.4 addressed an issue where improved validation checks prevent remote attackers from causing unexpected app termination.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28874 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28874.json"
        }
      ],
      "title": "CVE-2026-28874"
    },
    {
      "cve": "CVE-2026-28875",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in iOS 26.4 and iPadOS 26.4 was fixed by implementing improved bounds checking to prevent remote denial-of-service attacks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28875 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28875.json"
        }
      ],
      "title": "CVE-2026-28875"
    },
    {
      "cve": "CVE-2026-28876",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue in directory path handling was fixed by improving path validation across multiple OS versions to prevent unauthorized app access to sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28876 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28876.json"
        }
      ],
      "title": "CVE-2026-28876"
    },
    {
      "cve": "CVE-2026-28877",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing apps to potentially access sensitive user data was resolved by enhancing state management in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28877 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28877.json"
        }
      ],
      "title": "CVE-2026-28877"
    },
    {
      "cve": "CVE-2026-28878",
      "notes": [
        {
          "category": "description",
          "text": "Apple addressed a privacy vulnerability that allowed apps to enumerate installed applications by removing sensitive data in updates to iOS 18.7.7, iPadOS 18.7.7, macOS Sonoma 14.8.5, and other operating systems.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28878 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28878.json"
        }
      ],
      "title": "CVE-2026-28878"
    },
    {
      "cve": "CVE-2026-28879",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing potential process crashes when handling malicious web content was fixed through improved memory management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28879 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28879.json"
        }
      ],
      "title": "CVE-2026-28879"
    },
    {
      "cve": "CVE-2026-28880",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS addressed a permissions issue by implementing additional restrictions to prevent apps from enumerating a user\u2019s installed applications.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28880 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28880.json"
        }
      ],
      "title": "CVE-2026-28880"
    },
    {
      "cve": "CVE-2026-28882",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing apps to enumerate a user\u0027s installed applications was resolved through enhanced verification mechanisms in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28882 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28882.json"
        }
      ],
      "title": "CVE-2026-28882"
    },
    {
      "cve": "CVE-2026-28886",
      "notes": [
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability allowing a privileged network user to cause denial-of-service was fixed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28886 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28886.json"
        }
      ],
      "title": "CVE-2026-28886"
    },
    {
      "cve": "CVE-2026-28894",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability in iOS 26.4, iPadOS 26.4, and multiple macOS versions was addressed by improved input validation to prevent remote attackers from causing service disruptions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28894 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28894.json"
        }
      ],
      "title": "CVE-2026-28894"
    },
    {
      "cve": "CVE-2026-28895",
      "notes": [
        {
          "category": "description",
          "text": "iOS and iPadOS 16.4 fixed a vulnerability allowing attackers with physical access to bypass biometrics-gated Protected Apps by using the passcode on devices with Stolen Device Protection enabled through improved verification checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28895 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28895.json"
        }
      ],
      "title": "CVE-2026-28895"
    }
  ]
}

NCSC-2026-0102

Vulnerability from csaf_ncscnl - Published: 2026-03-25 14:15 - Updated: 2026-03-25 14:15

Summary

Kwetsbaarheden verholpen in Apple macOS

Notes

Feiten: Apple heeft meerdere kwetsbaarheden verholpen in macOS (Specifiek voor Sequoia 15.7.5, Sonoma 14.8.5, en Tahoe 26.4).

Interpretaties: De kwetsbaarheden omvatten verschillende problemen zoals onvoldoende validatie van invoer, onjuiste afhandeling van geheugen, en problemen met machtigingen die konden leiden tot ongeautoriseerde toegang tot gevoelige gebruikersdata. Aanvallers kunnen deze kwetsbaarheden misbruiken om toegang te krijgen tot beschermde systeembestanden, gegevens te wijzigen, of zelfs de stabiliteit van het systeem in gevaar te brengen. De kwetsbaarheden zijn opgelost door verbeterde validatie- en beveiligingsmechanismen in de betrokken macOS-versies.

Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

CWE-125: Out-of-bounds Read

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

CWE-190: Integer Overflow or Wraparound

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-201: Insertion of Sensitive Information Into Sent Data

CWE-265: Privilege Issues

CWE-275: Permission Issues

CWE-284: Improper Access Control

CWE-285: Improper Authorization

CWE-287: Improper Authentication

CWE-288: Authentication Bypass Using an Alternate Path or Channel

CWE-305: Authentication Bypass by Primary Weakness

CWE-346: Origin Validation Error

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-371: State Issues

CWE-377: Insecure Temporary File

CWE-404: Improper Resource Shutdown or Release

CWE-416: Use After Free

CWE-476: NULL Pointer Dereference

CWE-522: Insufficiently Protected Credentials

CWE-532: Insertion of Sensitive Information into Log File

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CWE-918: Server-Side Request Forgery (SSRF)

CWE-942: Permissive Cross-domain Security Policy with Untrusted Domains

CVE-2025-14524

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-522 - Insufficiently Protected Credentials

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-55753

Multiple vulnerabilities affect Oracle Communications Unified Assurance and Apache HTTP Server, including critical data compromise, denial of service, and issues in mod_md (ACME) components across various versions.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-58098

Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (pre-2.4.66), including issues with Server Side Includes, mod_cgid, mod_md, and mod_userdir+suexec, leading to data compromise, denial of service, and information disclosure.

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-59775

Multiple vulnerabilities affect Oracle Secure Backup and Apache HTTP Server, including unauthorized data modification, SSRF leading to NTLM hash leakage, and sensitive information disclosure across various versions and configurations.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-64505

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-65082

Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (2.4.0-2.4.65), including CGI environment variable overrides, improper neutralization of environment variables, and other security issues leading to data compromise and denial of service.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2025-66200

Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (2.4.7-2.4.65), including privilege escalation, mod_userdir+suexec bypass, and information disclosure issues.

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20607

macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent apps from accessing protected user data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20631

An elevation of privilege vulnerability in macOS Tahoe 26.4 was addressed by implementing enhanced logic checks to prevent unauthorized privilege escalation.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20632

macOS Tahoe 26.4 fixed a parsing vulnerability in directory path handling that previously allowed applications to access sensitive user data by enhancing path validation mechanisms.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20633

macOS versions Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 fixed a security issue involving symlink handling that previously allowed apps to access user-sensitive data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20637

A use after free vulnerability causing unexpected system termination was fixed by improving memory management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20639

An integer overflow vulnerability causing potential heap corruption from processing maliciously crafted strings was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.3 by improving input validation.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20643

Multiple Apple OS updates including Safari, iOS, iPadOS, and macOS addressed a cross-origin vulnerability in the Navigation API by improving input validation to prevent bypassing the Same Origin Policy.

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-346 - Origin Validation Error

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20651

A privacy vulnerability related to temporary file handling that allowed unauthorized app access to sensitive user data was resolved in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, and macOS Tahoe 26.3.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20657

Improved memory handling in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5 fixed an issue where parsing a maliciously crafted file could cause unexpected app termination.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20660

A path handling vulnerability allowing remote users to write arbitrary files was fixed in multiple Apple operating systems and Safari versions through improved logic preventing unauthorized file writes.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20664

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20665

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20668

A logging issue affecting iOS, iPadOS, macOS, and visionOS was fixed by enhancing data redaction to prevent apps from accessing sensitive user information.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20684

A permissions issue in macOS Tahoe 26.4 was fixed by implementing additional restrictions to prevent an app from bypassing Gatekeeper security checks.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20687

A use after free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing to kernel memory.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20688

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20690

An out-of-bounds access vulnerability in Apple operating systems was fixed by improving bounds checking to prevent process termination caused by maliciously crafted audio streams.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20691

An authorization vulnerability in Safari 26.4 and related OS versions was resolved by enhancing state management to prevent malicious webpages from fingerprinting users.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20692

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20693

An issue allowing an attacker with root privileges to delete protected system files was resolved through improved state management in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20694

Multiple versions of iOS, iPadOS, and macOS addressed a vulnerability involving improper handling of symlinks that could allow an app to access user-sensitive data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20695

An information disclosure vulnerability allowing applications to determine kernel memory layout was fixed by improving memory management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20697

macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent apps from accessing sensitive user data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20698

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20699

A downgrade vulnerability on Intel-based Macs allowing potential access to user-sensitive data was mitigated by enhanced code-signing restrictions in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.3/26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-20701

macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed an access issue by implementing additional sandbox restrictions to prevent apps from connecting to network shares without user consent.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28816

A path handling vulnerability allowing unauthorized file deletion was fixed through improved validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28817

A race condition vulnerability allowing sandboxed processes to bypass restrictions was fixed by improving state handling in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28818

A logging issue allowing apps to access sensitive user data was fixed through improved data redaction in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28820

macOS Tahoe 26.4 addressed a security issue by implementing enhanced validation checks to prevent unauthorized app access to sensitive user data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28821

A validation issue in entitlement verification that could allow an app to gain elevated privileges was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 through improved process entitlement validation.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28822

A type confusion vulnerability related to memory handling in multiple Apple operating systems could allow an attacker to cause unexpected application termination.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28823

A path handling vulnerability in macOS Tahoe 26.4 allowed applications with root privileges to delete protected system files, which was resolved through improved validation mechanisms.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28824

An authorization vulnerability allowing applications to access sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28825

An out-of-bounds write vulnerability allowing applications to modify protected file system areas was fixed by improving bounds checking in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28826

A logic flaw in macOS Tahoe 26.4 allowed a malicious application to escape its sandbox, which was addressed by implementing enhanced sandbox restrictions.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28827

A parsing vulnerability in directory path handling that could allow an application to escape its sandbox was fixed through enhanced path validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28828

A permissions vulnerability allowing applications to access sensitive user data was fixed by removing the vulnerable code in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28829

macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent applications from modifying protected parts of the file system.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28831

An authorization vulnerability allowing applications to access sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28832

An out-of-bounds read vulnerability in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 was fixed by improving bounds checking to prevent potential kernel memory disclosure by applications.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28833

A permissions issue allowing apps to enumerate a user’s installed applications was fixed by implementing additional restrictions in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28834

A race condition causing potential unexpected system termination was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 by improving state handling to address the issue.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28835

A use-after-free vulnerability in SMB network share mounting was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4, addressing a memory management flaw that could cause system termination.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28837

macOS Tahoe 26.4 addressed a logic flaw that previously allowed applications to improperly access sensitive user data by implementing enhanced validation checks.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28838

A permissions issue allowing an app to potentially escape its sandbox was fixed by implementing additional sandbox restrictions in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28839

An issue allowing applications to access sensitive user data was resolved through enhanced verification mechanisms in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28841

A buffer overflow vulnerability in macOS Tahoe 26.4 was addressed by enhancing size validation to prevent potential memory corruption and application crashes.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28842

The buffer overflow vulnerability causing memory corruption and application termination was addressed in macOS Tahoe 26.4 through enhanced bounds checking.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28844

An input validation vulnerability in macOS Tahoe 26.4 was addressed, preventing unauthorized access to the file system.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28845

An authorization vulnerability in macOS Tahoe 26.4 was addressed by enhancing state management to prevent unauthorized access to protected user data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28852

A stack overflow vulnerability allowing denial-of-service was fixed by improving input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28857

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28859

A memory handling vulnerability in Safari 26.4 and related OS versions was fixed, preventing malicious websites from processing restricted web content outside the sandbox environment.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28861

A logic issue in state management was fixed across multiple Apple operating systems to prevent malicious websites from accessing script message handlers intended for other origins.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28862

macOS updates Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 enhance private data redaction in log entries to prevent applications from accessing sensitive user information.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28864

Apple addressed a vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS by enhancing permissions checks to prevent local attackers from accessing users' Keychain items.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28865

An authentication vulnerability in multiple Apple operating systems was addressed by improving state management to prevent attackers in privileged network positions from intercepting network traffic.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28866

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28867

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28868

A logging issue in multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS was fixed by improving data redaction to prevent apps from disclosing kernel memory.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28870

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28871

A logic issue in Safari, iOS, iPadOS, and macOS was fixed through improved checks to prevent cross-site scripting attacks from malicious websites.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28876

A parsing issue in directory path handling was fixed by improving path validation across multiple OS versions to prevent unauthorized app access to sensitive user data.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28877

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28878

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28879

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28880

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28881

macOS Tahoe 26.4 fixed a privacy vulnerability by relocating sensitive user data to prevent unauthorized app access.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28882

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28886

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28888

A race condition vulnerability allowing an application to potentially gain root privileges was fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4 by improving state handling.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28891

A race condition vulnerability allowing an application to potentially escape its sandbox was fixed through additional validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28892

A permissions vulnerability allowing applications to modify protected file system areas was fixed by removing vulnerable code in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28893

A privacy vulnerability involving the handling of temporary files during print preview was addressed in the macOS Tahoe 26.4 update.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

CVE-2026-28894

A denial-of-service vulnerability in iOS 26.4, iPadOS 26.4, and multiple macOS versions was addressed by improved input validation to prevent remote attackers from causing service disruptions.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Apple / Mac OS		vers:unknown/*

References

86 references

URL	Category
https://support.apple.com/en-us/126794	external
https://support.apple.com/en-us/126795	external
https://support.apple.com/en-us/126796	external
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in macOS (Specifiek voor Sequoia 15.7.5, Sonoma 14.8.5, en Tahoe 26.4).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten verschillende problemen zoals onvoldoende validatie van invoer, onjuiste afhandeling van geheugen, en problemen met machtigingen die konden leiden tot ongeautoriseerde toegang tot gevoelige gebruikersdata. Aanvallers kunnen deze kwetsbaarheden misbruiken om toegang te krijgen tot beschermde systeembestanden, gegevens te wijzigen, of zelfs de stabiliteit van het systeem in gevaar te brengen. De kwetsbaarheden zijn opgelost door verbeterde validatie- en beveiligingsmechanismen in de betrokken macOS-versies.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Escape, Meta, or Control Sequences",
        "title": "CWE-150"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information Into Sent Data",
        "title": "CWE-201"
      },
      {
        "category": "general",
        "text": "Privilege Issues",
        "title": "CWE-265"
      },
      {
        "category": "general",
        "text": "Permission Issues",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Authorization",
        "title": "CWE-285"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      },
      {
        "category": "general",
        "text": "Authentication Bypass Using an Alternate Path or Channel",
        "title": "CWE-288"
      },
      {
        "category": "general",
        "text": "Authentication Bypass by Primary Weakness",
        "title": "CWE-305"
      },
      {
        "category": "general",
        "text": "Origin Validation Error",
        "title": "CWE-346"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "State Issues",
        "title": "CWE-371"
      },
      {
        "category": "general",
        "text": "Insecure Temporary File",
        "title": "CWE-377"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Insufficiently Protected Credentials",
        "title": "CWE-522"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information into Log File",
        "title": "CWE-532"
      },
      {
        "category": "general",
        "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
        "title": "CWE-601"
      },
      {
        "category": "general",
        "text": "Server-Side Request Forgery (SSRF)",
        "title": "CWE-918"
      },
      {
        "category": "general",
        "text": "Permissive Cross-domain Security Policy with Untrusted Domains",
        "title": "CWE-942"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/126794"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/126795"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/126796"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple macOS",
    "tracking": {
      "current_release_date": "2026-03-25T14:15:56.073353Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0102",
      "initial_release_date": "2026-03-25T14:15:56.073353Z",
      "revision_history": [
        {
          "date": "2026-03-25T14:15:56.073353Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Mac OS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14524",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficiently Protected Credentials",
          "title": "CWE-522"
        },
        {
          "category": "other",
          "text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
          "title": "CWE-601"
        },
        {
          "category": "description",
          "text": "A vulnerability in libcurl versions 7.33.0 to 8.17.0 causes OAuth2 bearer tokens to be unintentionally leaked during cross-protocol redirects involving IMAP, LDAP, POP3, or SMTP schemes, potentially exposing sensitive information.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-14524 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-14524.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-14524"
    },
    {
      "cve": "CVE-2025-55753",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities affect Oracle Communications Unified Assurance and Apache HTTP Server, including critical data compromise, denial of service, and issues in mod_md (ACME) components across various versions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-55753 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-55753.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-55753"
    },
    {
      "cve": "CVE-2025-58098",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insertion of Sensitive Information Into Sent Data",
          "title": "CWE-201"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (pre-2.4.66), including issues with Server Side Includes, mod_cgid, mod_md, and mod_userdir+suexec, leading to data compromise, denial of service, and information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-58098 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-58098.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-58098"
    },
    {
      "cve": "CVE-2025-59775",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Server-Side Request Forgery (SSRF)",
          "title": "CWE-918"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities affect Oracle Secure Backup and Apache HTTP Server, including unauthorized data modification, SSRF leading to NTLM hash leakage, and sensitive information disclosure across various versions and configurations.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-59775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59775.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-59775"
    },
    {
      "cve": "CVE-2025-64505",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in libpng, including heap buffer overflows and over-reads in functions like png_do_quantize, affect various products including NetApp and Apple software, alongside a separate Oracle MySQL Workbench flaw allowing unauthorized data modification or denial of service.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-64505 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-64505.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-65082",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Escape, Meta, or Control Sequences",
          "title": "CWE-150"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (2.4.0-2.4.65), including CGI environment variable overrides, improper neutralization of environment variables, and other security issues leading to data compromise and denial of service.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-65082 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-65082.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-65082"
    },
    {
      "cve": "CVE-2025-66200",
      "cwe": {
        "id": "CWE-288",
        "name": "Authentication Bypass Using an Alternate Path or Channel"
      },
      "notes": [
        {
          "category": "other",
          "text": "Authentication Bypass Using an Alternate Path or Channel",
          "title": "CWE-288"
        },
        {
          "category": "other",
          "text": "Authentication Bypass by Primary Weakness",
          "title": "CWE-305"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities affect Oracle Communications Unified Assurance (6.1.0-6.1.1) and Apache HTTP Server (2.4.7-2.4.65), including privilege escalation, mod_userdir+suexec bypass, and information disclosure issues.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-66200 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-66200.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2025-66200"
    },
    {
      "cve": "CVE-2026-20607",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent apps from accessing protected user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20607 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20607.json"
        }
      ],
      "title": "CVE-2026-20607"
    },
    {
      "cve": "CVE-2026-20631",
      "notes": [
        {
          "category": "description",
          "text": "An elevation of privilege vulnerability in macOS Tahoe 26.4 was addressed by implementing enhanced logic checks to prevent unauthorized privilege escalation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20631 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20631.json"
        }
      ],
      "title": "CVE-2026-20631"
    },
    {
      "cve": "CVE-2026-20632",
      "notes": [
        {
          "category": "description",
          "text": "macOS Tahoe 26.4 fixed a parsing vulnerability in directory path handling that previously allowed applications to access sensitive user data by enhancing path validation mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20632 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20632.json"
        }
      ],
      "title": "CVE-2026-20632"
    },
    {
      "cve": "CVE-2026-20633",
      "notes": [
        {
          "category": "description",
          "text": "macOS versions Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 fixed a security issue involving symlink handling that previously allowed apps to access user-sensitive data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20633 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20633.json"
        }
      ],
      "title": "CVE-2026-20633"
    },
    {
      "cve": "CVE-2026-20637",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing unexpected system termination was fixed by improving memory management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20637 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20637.json"
        }
      ],
      "title": "CVE-2026-20637"
    },
    {
      "cve": "CVE-2026-20639",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability causing potential heap corruption from processing maliciously crafted strings was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.3 by improving input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20639 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20639.json"
        }
      ],
      "title": "CVE-2026-20639"
    },
    {
      "cve": "CVE-2026-20643",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Origin Validation Error",
          "title": "CWE-346"
        },
        {
          "category": "description",
          "text": "Multiple Apple OS updates including Safari, iOS, iPadOS, and macOS addressed a cross-origin vulnerability in the Navigation API by improving input validation to prevent bypassing the Same Origin Policy.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20643 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20643.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20643"
    },
    {
      "cve": "CVE-2026-20651",
      "notes": [
        {
          "category": "description",
          "text": "A privacy vulnerability related to temporary file handling that allowed unauthorized app access to sensitive user data was resolved in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, and macOS Tahoe 26.3.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20651 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20651.json"
        }
      ],
      "title": "CVE-2026-20651"
    },
    {
      "cve": "CVE-2026-20657",
      "notes": [
        {
          "category": "description",
          "text": "Improved memory handling in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5 fixed an issue where parsing a maliciously crafted file could cause unexpected app termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20657 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20657.json"
        }
      ],
      "title": "CVE-2026-20657"
    },
    {
      "cve": "CVE-2026-20660",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "A path handling vulnerability allowing remote users to write arbitrary files was fixed in multiple Apple operating systems and Safari versions through improved logic preventing unauthorized file writes.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20660 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20660.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20660"
    },
    {
      "cve": "CVE-2026-20664",
      "notes": [
        {
          "category": "description",
          "text": "Improved memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4 fixed an issue where processing maliciously crafted web content could cause unexpected process crashes.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20664 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20664.json"
        }
      ],
      "title": "CVE-2026-20664"
    },
    {
      "cve": "CVE-2026-20665",
      "notes": [
        {
          "category": "description",
          "text": "Apple fixed a vulnerability in multiple operating systems and Safari versions 26.4 and iOS/iPadOS 18.7.7 where malicious web content could bypass Content Security Policy enforcement due to improper state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20665 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20665.json"
        }
      ],
      "title": "CVE-2026-20665"
    },
    {
      "cve": "CVE-2026-20668",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue affecting iOS, iPadOS, macOS, and visionOS was fixed by enhancing data redaction to prevent apps from accessing sensitive user information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20668 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20668.json"
        }
      ],
      "title": "CVE-2026-20668"
    },
    {
      "cve": "CVE-2026-20684",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue in macOS Tahoe 26.4 was fixed by implementing additional restrictions to prevent an app from bypassing Gatekeeper security checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20684 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20684.json"
        }
      ],
      "title": "CVE-2026-20684"
    },
    {
      "cve": "CVE-2026-20687",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing to kernel memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20687 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20687.json"
        }
      ],
      "title": "CVE-2026-20687"
    },
    {
      "cve": "CVE-2026-20688",
      "notes": [
        {
          "category": "description",
          "text": "A path handling vulnerability allowing applications to potentially escape their sandbox was fixed through improved validation in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, and visionOS 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20688 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20688.json"
        }
      ],
      "title": "CVE-2026-20688"
    },
    {
      "cve": "CVE-2026-20690",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access vulnerability in Apple operating systems was fixed by improving bounds checking to prevent process termination caused by maliciously crafted audio streams.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20690 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20690.json"
        }
      ],
      "title": "CVE-2026-20690"
    },
    {
      "cve": "CVE-2026-20691",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability in Safari 26.4 and related OS versions was resolved by enhancing state management to prevent malicious webpages from fingerprinting users.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20691 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20691.json"
        }
      ],
      "title": "CVE-2026-20691"
    },
    {
      "cve": "CVE-2026-20692",
      "notes": [
        {
          "category": "description",
          "text": "A privacy issue affecting user preferences for mail content handling, specifically the \u0027Hide IP Address\u0027 and \u0027Block All Remote Content\u0027 features, was fixed in iOS 26.4, iPadOS 26.4, and various macOS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20692 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20692.json"
        }
      ],
      "title": "CVE-2026-20692"
    },
    {
      "cve": "CVE-2026-20693",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing an attacker with root privileges to delete protected system files was resolved through improved state management in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20693 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20693.json"
        }
      ],
      "title": "CVE-2026-20693"
    },
    {
      "cve": "CVE-2026-20694",
      "notes": [
        {
          "category": "description",
          "text": "Multiple versions of iOS, iPadOS, and macOS addressed a vulnerability involving improper handling of symlinks that could allow an app to access user-sensitive data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20694 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20694.json"
        }
      ],
      "title": "CVE-2026-20694"
    },
    {
      "cve": "CVE-2026-20695",
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure vulnerability allowing applications to determine kernel memory layout was fixed by improving memory management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20695 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20695.json"
        }
      ],
      "title": "CVE-2026-20695"
    },
    {
      "cve": "CVE-2026-20697",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent apps from accessing sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20697 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20697.json"
        }
      ],
      "title": "CVE-2026-20697"
    },
    {
      "cve": "CVE-2026-20698",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4 could allow an app to cause unexpected system termination or kernel memory corruption, which was resolved through improved memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20698 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20698.json"
        }
      ],
      "title": "CVE-2026-20698"
    },
    {
      "cve": "CVE-2026-20699",
      "notes": [
        {
          "category": "description",
          "text": "A downgrade vulnerability on Intel-based Macs allowing potential access to user-sensitive data was mitigated by enhanced code-signing restrictions in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.3/26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20699 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20699.json"
        }
      ],
      "title": "CVE-2026-20699"
    },
    {
      "cve": "CVE-2026-20701",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed an access issue by implementing additional sandbox restrictions to prevent apps from connecting to network shares without user consent.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20701 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20701.json"
        }
      ],
      "title": "CVE-2026-20701"
    },
    {
      "cve": "CVE-2026-28816",
      "notes": [
        {
          "category": "description",
          "text": "A path handling vulnerability allowing unauthorized file deletion was fixed through improved validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28816 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28816.json"
        }
      ],
      "title": "CVE-2026-28816"
    },
    {
      "cve": "CVE-2026-28817",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability allowing sandboxed processes to bypass restrictions was fixed by improving state handling in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28817 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28817.json"
        }
      ],
      "title": "CVE-2026-28817"
    },
    {
      "cve": "CVE-2026-28818",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue allowing apps to access sensitive user data was fixed through improved data redaction in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28818 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28818.json"
        }
      ],
      "title": "CVE-2026-28818"
    },
    {
      "cve": "CVE-2026-28820",
      "notes": [
        {
          "category": "description",
          "text": "macOS Tahoe 26.4 addressed a security issue by implementing enhanced validation checks to prevent unauthorized app access to sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28820 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28820.json"
        }
      ],
      "title": "CVE-2026-28820"
    },
    {
      "cve": "CVE-2026-28821",
      "notes": [
        {
          "category": "description",
          "text": "A validation issue in entitlement verification that could allow an app to gain elevated privileges was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 through improved process entitlement validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28821 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28821.json"
        }
      ],
      "title": "CVE-2026-28821"
    },
    {
      "cve": "CVE-2026-28822",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability related to memory handling in multiple Apple operating systems could allow an attacker to cause unexpected application termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28822 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28822.json"
        }
      ],
      "title": "CVE-2026-28822"
    },
    {
      "cve": "CVE-2026-28823",
      "notes": [
        {
          "category": "description",
          "text": "A path handling vulnerability in macOS Tahoe 26.4 allowed applications with root privileges to delete protected system files, which was resolved through improved validation mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28823 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28823.json"
        }
      ],
      "title": "CVE-2026-28823"
    },
    {
      "cve": "CVE-2026-28824",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing applications to access sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28824 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28824.json"
        }
      ],
      "title": "CVE-2026-28824"
    },
    {
      "cve": "CVE-2026-28825",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability allowing applications to modify protected file system areas was fixed by improving bounds checking in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28825 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28825.json"
        }
      ],
      "title": "CVE-2026-28825"
    },
    {
      "cve": "CVE-2026-28826",
      "notes": [
        {
          "category": "description",
          "text": "A logic flaw in macOS Tahoe 26.4 allowed a malicious application to escape its sandbox, which was addressed by implementing enhanced sandbox restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28826 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28826.json"
        }
      ],
      "title": "CVE-2026-28826"
    },
    {
      "cve": "CVE-2026-28827",
      "notes": [
        {
          "category": "description",
          "text": "A parsing vulnerability in directory path handling that could allow an application to escape its sandbox was fixed through enhanced path validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28827 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28827.json"
        }
      ],
      "title": "CVE-2026-28827"
    },
    {
      "cve": "CVE-2026-28828",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing applications to access sensitive user data was fixed by removing the vulnerable code in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28828 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28828.json"
        }
      ],
      "title": "CVE-2026-28828"
    },
    {
      "cve": "CVE-2026-28829",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 addressed a permissions issue by implementing additional restrictions to prevent applications from modifying protected parts of the file system.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28829 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28829.json"
        }
      ],
      "title": "CVE-2026-28829"
    },
    {
      "cve": "CVE-2026-28831",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing applications to access sensitive user data was resolved by enhancing state management in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28831 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28831.json"
        }
      ],
      "title": "CVE-2026-28831"
    },
    {
      "cve": "CVE-2026-28832",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 was fixed by improving bounds checking to prevent potential kernel memory disclosure by applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28832 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28832.json"
        }
      ],
      "title": "CVE-2026-28832"
    },
    {
      "cve": "CVE-2026-28833",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue allowing apps to enumerate a user\u2019s installed applications was fixed by implementing additional restrictions in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28833 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28833.json"
        }
      ],
      "title": "CVE-2026-28833"
    },
    {
      "cve": "CVE-2026-28834",
      "notes": [
        {
          "category": "description",
          "text": "A race condition causing potential unexpected system termination was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 by improving state handling to address the issue.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28834 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28834.json"
        }
      ],
      "title": "CVE-2026-28834"
    },
    {
      "cve": "CVE-2026-28835",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in SMB network share mounting was fixed in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4, addressing a memory management flaw that could cause system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28835 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28835.json"
        }
      ],
      "title": "CVE-2026-28835"
    },
    {
      "cve": "CVE-2026-28837",
      "notes": [
        {
          "category": "description",
          "text": "macOS Tahoe 26.4 addressed a logic flaw that previously allowed applications to improperly access sensitive user data by implementing enhanced validation checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28837 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28837.json"
        }
      ],
      "title": "CVE-2026-28837"
    },
    {
      "cve": "CVE-2026-28838",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue allowing an app to potentially escape its sandbox was fixed by implementing additional sandbox restrictions in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28838 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28838.json"
        }
      ],
      "title": "CVE-2026-28838"
    },
    {
      "cve": "CVE-2026-28839",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing applications to access sensitive user data was resolved through enhanced verification mechanisms in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28839 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28839.json"
        }
      ],
      "title": "CVE-2026-28839"
    },
    {
      "cve": "CVE-2026-28841",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in macOS Tahoe 26.4 was addressed by enhancing size validation to prevent potential memory corruption and application crashes.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28841 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28841.json"
        }
      ],
      "title": "CVE-2026-28841"
    },
    {
      "cve": "CVE-2026-28842",
      "notes": [
        {
          "category": "description",
          "text": "The buffer overflow vulnerability causing memory corruption and application termination was addressed in macOS Tahoe 26.4 through enhanced bounds checking.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28842 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28842.json"
        }
      ],
      "title": "CVE-2026-28842"
    },
    {
      "cve": "CVE-2026-28844",
      "notes": [
        {
          "category": "description",
          "text": "An input validation vulnerability in macOS Tahoe 26.4 was addressed, preventing unauthorized access to the file system.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28844 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28844.json"
        }
      ],
      "title": "CVE-2026-28844"
    },
    {
      "cve": "CVE-2026-28845",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability in macOS Tahoe 26.4 was addressed by enhancing state management to prevent unauthorized access to protected user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28845 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28845.json"
        }
      ],
      "title": "CVE-2026-28845"
    },
    {
      "cve": "CVE-2026-28852",
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow vulnerability allowing denial-of-service was fixed by improving input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28852 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28852.json"
        }
      ],
      "title": "CVE-2026-28852"
    },
    {
      "cve": "CVE-2026-28857",
      "notes": [
        {
          "category": "description",
          "text": "Improved memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4 fixed an issue where processing maliciously crafted web content could cause unexpected process crashes.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28857 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28857.json"
        }
      ],
      "title": "CVE-2026-28857"
    },
    {
      "cve": "CVE-2026-28859",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in Safari 26.4 and related OS versions was fixed, preventing malicious websites from processing restricted web content outside the sandbox environment.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28859 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28859.json"
        }
      ],
      "title": "CVE-2026-28859"
    },
    {
      "cve": "CVE-2026-28861",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue in state management was fixed across multiple Apple operating systems to prevent malicious websites from accessing script message handlers intended for other origins.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28861 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28861.json"
        }
      ],
      "title": "CVE-2026-28861"
    },
    {
      "cve": "CVE-2026-28862",
      "notes": [
        {
          "category": "description",
          "text": "macOS updates Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 enhance private data redaction in log entries to prevent applications from accessing sensitive user information.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28862 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28862.json"
        }
      ],
      "title": "CVE-2026-28862"
    },
    {
      "cve": "CVE-2026-28864",
      "notes": [
        {
          "category": "description",
          "text": "Apple addressed a vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS by enhancing permissions checks to prevent local attackers from accessing users\u0027 Keychain items.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28864 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28864.json"
        }
      ],
      "title": "CVE-2026-28864"
    },
    {
      "cve": "CVE-2026-28865",
      "notes": [
        {
          "category": "description",
          "text": "An authentication vulnerability in multiple Apple operating systems was addressed by improving state management to prevent attackers in privileged network positions from intercepting network traffic.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28865 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28865.json"
        }
      ],
      "title": "CVE-2026-28865"
    },
    {
      "cve": "CVE-2026-28866",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, and various macOS versions addressed a vulnerability where improper symlink validation allowed apps to access sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28866 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28866.json"
        }
      ],
      "title": "CVE-2026-28866"
    },
    {
      "cve": "CVE-2026-28867",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially leak sensitive kernel state was fixed through improved authentication in multiple Apple operating systems including iOS 18.7.7, iPadOS 18.7.7, and macOS Sequoia 15.7.5.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28867 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28867.json"
        }
      ],
      "title": "CVE-2026-28867"
    },
    {
      "cve": "CVE-2026-28868",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue in multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS was fixed by improving data redaction to prevent apps from disclosing kernel memory.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28868 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28868.json"
        }
      ],
      "title": "CVE-2026-28868"
    },
    {
      "cve": "CVE-2026-28870",
      "notes": [
        {
          "category": "description",
          "text": "An information leakage vulnerability allowing unauthorized access to sensitive user data was fixed through additional validation in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28870 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28870.json"
        }
      ],
      "title": "CVE-2026-28870"
    },
    {
      "cve": "CVE-2026-28871",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue in Safari, iOS, iPadOS, and macOS was fixed through improved checks to prevent cross-site scripting attacks from malicious websites.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28871 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28871.json"
        }
      ],
      "title": "CVE-2026-28871"
    },
    {
      "cve": "CVE-2026-28876",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue in directory path handling was fixed by improving path validation across multiple OS versions to prevent unauthorized app access to sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28876 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28876.json"
        }
      ],
      "title": "CVE-2026-28876"
    },
    {
      "cve": "CVE-2026-28877",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing apps to potentially access sensitive user data was resolved by enhancing state management in iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28877 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28877.json"
        }
      ],
      "title": "CVE-2026-28877"
    },
    {
      "cve": "CVE-2026-28878",
      "notes": [
        {
          "category": "description",
          "text": "Apple addressed a privacy vulnerability that allowed apps to enumerate installed applications by removing sensitive data in updates to iOS 18.7.7, iPadOS 18.7.7, macOS Sonoma 14.8.5, and other operating systems.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28878 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28878.json"
        }
      ],
      "title": "CVE-2026-28878"
    },
    {
      "cve": "CVE-2026-28879",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing potential process crashes when handling malicious web content was fixed through improved memory management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28879 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28879.json"
        }
      ],
      "title": "CVE-2026-28879"
    },
    {
      "cve": "CVE-2026-28880",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS addressed a permissions issue by implementing additional restrictions to prevent apps from enumerating a user\u2019s installed applications.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28880 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28880.json"
        }
      ],
      "title": "CVE-2026-28880"
    },
    {
      "cve": "CVE-2026-28881",
      "notes": [
        {
          "category": "description",
          "text": "macOS Tahoe 26.4 fixed a privacy vulnerability by relocating sensitive user data to prevent unauthorized app access.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28881 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28881.json"
        }
      ],
      "title": "CVE-2026-28881"
    },
    {
      "cve": "CVE-2026-28882",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing apps to enumerate a user\u0027s installed applications was resolved through enhanced verification mechanisms in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28882 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28882.json"
        }
      ],
      "title": "CVE-2026-28882"
    },
    {
      "cve": "CVE-2026-28886",
      "notes": [
        {
          "category": "description",
          "text": "A null pointer dereference vulnerability allowing a privileged network user to cause denial-of-service was fixed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28886 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28886.json"
        }
      ],
      "title": "CVE-2026-28886"
    },
    {
      "cve": "CVE-2026-28888",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability allowing an application to potentially gain root privileges was fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4 by improving state handling.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28888 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28888.json"
        }
      ],
      "title": "CVE-2026-28888"
    },
    {
      "cve": "CVE-2026-28891",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability allowing an application to potentially escape its sandbox was fixed through additional validation in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28891 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28891.json"
        }
      ],
      "title": "CVE-2026-28891"
    },
    {
      "cve": "CVE-2026-28892",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing applications to modify protected file system areas was fixed by removing vulnerable code in macOS Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28892 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28892.json"
        }
      ],
      "title": "CVE-2026-28892"
    },
    {
      "cve": "CVE-2026-28893",
      "notes": [
        {
          "category": "description",
          "text": "A privacy vulnerability involving the handling of temporary files during print preview was addressed in the macOS Tahoe 26.4 update.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28893 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28893.json"
        }
      ],
      "title": "CVE-2026-28893"
    },
    {
      "cve": "CVE-2026-28894",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability in iOS 26.4, iPadOS 26.4, and multiple macOS versions was addressed by improved input validation to prevent remote attackers from causing service disruptions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28894 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28894.json"
        }
      ],
      "title": "CVE-2026-28894"
    }
  ]
}

NCSC-2026-0173

Vulnerability from csaf_ncscnl - Published: 2026-06-02 08:00 - Updated: 2026-06-02 08:00

Summary

Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Notes

Feiten: Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zichzelf verhoogde rechten toe te kennen, toegang te krijgen tot gevoelige gegevens of willekeurige code uit te voeren. Onder de verholpen kwetsbaarheden zit een aantal kwetsbaarheden die door Google worden gemarkeerd als 'Critical'. Google heeft verder, zoals gebruikelijk, weinig detailinformatie beschikbaar gesteld.

Oplossingen: Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12,13 en 14. Samsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-121: Stack-based Buffer Overflow

CWE-122: Heap-based Buffer Overflow

CWE-125: Out-of-bounds Read

CWE-126: Buffer Over-read

CWE-129: Improper Validation of Array Index

CWE-190: Integer Overflow or Wraparound

CWE-269: Improper Privilege Management

CWE-400: Uncontrolled Resource Consumption

CWE-416: Use After Free

CWE-476: NULL Pointer Dereference

CWE-617: Reachable Assertion

CWE-693: Protection Mechanism Failure

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-787: Out-of-bounds Write

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

CWE-1286: Improper Validation of Syntactic Correctness of Input

CVE-2025-22424

Improper input validation in multiple locations can allow users to access images across accounts, potentially leading to local privilege escalation without additional execution privileges, requiring user interaction for exploitation.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-22426

A logic error in ComputerEngine.java permits unauthorized access to user URIs, enabling local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-32348

A missing permission check in multiple locations allows background activity launches, potentially enabling local privilege escalation without user interaction or additional execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-47384

A transient denial of service (DoS) condition arises when the MAC is configured with a configuration ID exceeding its supported maximum value, causing temporary service disruption.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-47392

Memory corruption occurs during the decoding of corrupted satellite data files containing invalid signature offsets, potentially leading to system instability or exploitation.

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-47400

A cryptographic vulnerability occurs when data is copied to a destination buffer without verifying the buffer's size, potentially causing security issues such as buffer overflows.

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-47401

A transient denial of service vulnerability occurs during the processing of target power rate tables in channel configuration, potentially disrupting normal device operation.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-47403

A transient denial-of-service condition may occur during wireless roaming when a malformed Fast Transition response frame with an invalid header structure is processed.

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-48570

PipTaskOrganizer.java contains multiple confused deputy vulnerabilities enabling background activity launches that may lead to local privilege escalation without user interaction or additional execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-48595

An integer overflow vulnerability present in multiple locations can enable local privilege escalation without requiring additional execution privileges or user interaction.

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-48615

A resource exhaustion issue in getComponentName of MediaButtonReceiverHolder.java may cause desynchronization in persistence, enabling local privilege escalation without user interaction or additional privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-48649

A permissions bypass vulnerability in multiple locations allows resetting user-selected permissions, potentially enabling local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-48652

A logic error in the performPreInstallChecks function of InstallRepository.kt enables bypassing MDM policy, allowing local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-59604

Memory corruption arises during a memory copy operation due to invalid writes triggered by a null pointer dereference, leading to potential instability or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-59605

Memory corruption vulnerabilities arise from processing device identifier strings that exceed their expected maximum length, potentially leading to unstable system behavior or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-59606

Memory corruption occurs due to heap memory exhaustion during secure data initialization, leading to writes in invalid memory locations.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-64505

Multiple vulnerabilities in libpng, including heap buffer over-reads and overflows in functions like png_do_quantize and png_image_read_composite, affect various products such as MySQL Workbench, NetApp, Oracle Hyperion, and Apple Software, potentially causing data disclosure, denial of service, or application crashes.

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-64720

Libpng versions prior to 1.6.51 contain multiple memory handling vulnerabilities including out-of-bounds reads and buffer overflows in functions like png_image_read_composite, png_do_quantize, and png_combine_row, affecting various products such as MySQL Workbench and NetApp devices.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2025-65018

Multiple heap buffer overflow and out-of-bounds read vulnerabilities exist in libpng versions 1.6.0 to before 1.6.51, affecting functions like png_image_finish_read and png_combine_row, impacting products from Oracle, NetApp, and others.

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0009

A logic error in the code enables tapjacking vulnerabilities at multiple points, allowing local privilege escalation without requiring additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0016

A permissions bypass vulnerability in CredentialManagerService.java's updateProvidersWhenServiceRemoved function allows overriding settings across users, potentially leading to local information disclosure without extra privileges or user interaction.

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0018

AccessibilityManagerService.java contains multiple functions with inadequate input validation, leading to a persistent local denial of service without requiring user interaction or elevated privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0036

A tapjacking vulnerability in the startAnimation method of StageCoordinator.java enables local privilege escalation without requiring user interaction or additional execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0039

A remote denial of service vulnerability caused by an integer overflow exists in multiple functions of ubsan_throwing_runtime.cpp, exploitable without user interaction or elevated privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0040

An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0041

A potential integer overflow in multiple functions of ubsan_throwing_runtime.cpp can cause a UBSan failure, resulting in a remote denial of service without user interaction or elevated privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0042

A vulnerability in ubsan_throwing_runtime.cpp functions can lead to a persistent local denial of service via resource exhaustion without requiring user interaction or elevated privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0043

A vulnerability in ubsan_throwing_runtime.cpp involving integer overflow can lead to persistent denial of service and local privilege escalation without requiring user interaction or elevated privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0044

A vulnerability in ubsan_throwing_runtime.cpp involving an integer overflow can cause a system crash, potentially enabling remote denial of service without user interaction or additional privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0046

A vulnerability in InputInterceptor of Letterbox.java enables a tapjacking/overlay attack that can trick users into granting permissions, potentially causing local privilege escalation without user interaction or extra execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0048

A vulnerability in WindowState.java enables a tapjacking or overlay attack that can deceive users into granting permissions, potentially resulting in local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0051

A vulnerability in multiple functions of ubsan_throwing_runtime.cpp allows remote denial of service via improper input validation, exploitable without user interaction or additional privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0052

An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0055

A path traversal vulnerability in PackageInstallerService.java's createSessionInternal method allows local privilege escalation by enabling updates to a Device Policy Controller in unauthorized directories without user interaction or extra privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0056

A vulnerability in ResourceTypes.cpp's setTo function may lead to an out-of-bounds read, potentially causing local information disclosure without user interaction or elevated privileges.

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0059

A heap buffer overflow vulnerability in multiple functions of sdp_discovery.cc could enable remote code execution without requiring additional privileges or user interaction.

8.0 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0061

WindowState.java contains multiple functions vulnerable to tapjacking and overlay attacks that can deceive users into granting permissions, enabling local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0069

A vulnerability in the verifySignature function of ApkChecksums.java can cause resource exhaustion leading to a crash and local denial of service without user interaction or elevated privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0070

A vulnerability in DevicePolicyManagerService.java allows hiding a critical system package via improper input validation, enabling a local denial of service without user interaction or additional privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0076

An out-of-bounds read vulnerability in the validateNode function of ResourceTypes.cpp due to improper bounds checking may enable local privilege escalation without additional execution privileges or user interaction.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0077

A logic error in resumeConfigurationDispatch within ActivityRecord.java can trigger background application launches, enabling local privilege escalation without user interaction or elevated execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0078

A vulnerability in DevicePolicyManagerService.java's setGlobalProxy method allows local privilege escalation without user interaction due to improper input validation causing persistence desynchronization.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0080

An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0087

A logic error in DomainVerificationService.java's approvalLevelForDomainInternal function enables hijacking of arbitrary app links, leading to local privilege escalation without user interaction or extra execution privileges.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0089

A missing permission check in multiple functions of PackageInstallerService.java enables installation of unverified applications, potentially causing local privilege escalation without user interaction or additional execution privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0091

An over-privileged shell user in the launcher process enables code execution that results in local privilege escalation without requiring user interaction or additional execution privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0097

A logic error in multiple locations allows bypassing user interaction during LE device pairing, enabling remote privilege escalation without requiring additional execution privileges.

8.0 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-0100

A heap buffer overflow vulnerability in LoadedArsc.cpp can lead to an out-of-bounds write, enabling local privilege escalation without user interaction or additional execution privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21017

A vulnerability in SecTelephonyProvider before SMR Jun-2026 Release 1 allows local attackers to access privileged files due to improper privilege handling.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21025

A vulnerability in Telephony before SMR Jun-2026 Release 1 allows local attackers to access sensitive information due to incorrect privilege assignment, posing a significant security risk.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21026

A vulnerability in SpriteWallpaper before SMR Jun-2026 Release 1 allows local attackers to access sensitive information due to improper export of Android application components.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21027

An improper export vulnerability in Android's ImsSettings component before SMR June 2026 Release 1 allows local attackers to trigger the logging function.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21028

An improper access control vulnerability in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21029

A vulnerability in Galaxy Editing Service before SMR Jun-2026 Release 1 allows local attackers to perform privileged operations by exploiting improper export of Android application components.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21030

An improper access control vulnerability in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to execute privileged functions, posing a significant security risk.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21031

An improper authorization vulnerability in AppBlock before SMR Jun-2026 Release 1 allows a local attacker to launch arbitrary activities, requiring user interaction to exploit.

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21352

DNG SDK versions 1.7.1 2410 and earlier have an out-of-bounds write vulnerability that may allow arbitrary code execution when processing malicious files.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21353

DNG SDK versions 1.7.1 2410 and earlier contain an Integer Overflow vulnerability that allows arbitrary code execution when a malicious file is opened.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21367

A transient denial of service vulnerability arises from processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial network scans, potentially disrupting normal device operations.

7.6 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21372

Memory corruption vulnerabilities arise from sending IOCTL requests with invalid buffer sizes during memcpy operations, potentially leading to unstable system behavior or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21373

Memory corruption vulnerabilities can arise when output buffer sizes are not properly validated during IOCTL processing, potentially leading to system instability or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21374

A memory corruption vulnerability arises from insufficient buffer size validation during the processing of auxiliary sensor input/output control commands, potentially leading to unstable system behavior.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21375

Memory corruption vulnerabilities can arise when output buffer sizes are not properly validated during IOCTL processing, potentially leading to system instability or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21376

A memory corruption vulnerability exists in a camera sensor driver caused by insufficient validation of output buffer size during IOCTL processing, potentially leading to system instability or exploitation.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21378

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21380

Memory corruption vulnerabilities arise from the use of deprecated DMABUF IOCTL calls for video memory management, potentially impacting system stability and security.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21381

A transient denial-of-service vulnerability arises when a device processes a service data frame with excessive length during device matching over a Neighborhood Awareness Network protocol connection.

7.6 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-126 - Buffer Over-read

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-21547

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-23787

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-24085

Memory corruption arises during the processing of display command line information due to an uninitialized variable, potentially leading to unstable system behavior or security risks.

7.2 (High)


                        
                          CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-24089

Memory corruption vulnerability arises from processing fastboot commands with invalid input, potentially leading to unstable system behavior or exploitation.

7.2 (High)


                        
                          CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-25276

A memory corruption vulnerability arises in Strongbox due to the absence of a bounds check, potentially leading to unstable behavior or exploitation.

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-129 - Improper Validation of Array Index

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-25277

A buffer overflow vulnerability in Strongbox leads to memory corruption, potentially compromising system stability and security.

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-28577

A tapjacking vulnerability in the addWindow method of WindowManagerService.java enables local privilege escalation without user interaction or additional execution privileges.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-28578

DevicePolicyManagerService.java contains multiple functions with improper input validation that can cause desynchronization from persistence, potentially resulting in a local denial of service without user interaction or elevated privileges.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-28580

A bounds check error in multiple functions can cause persistence desynchronization, leading to local privilege escalation without requiring additional execution privileges or user interaction.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

CVE-2026-28586

AppOpsService.java contains multiple functions lacking proper permission checks, potentially enabling local information disclosure without user interaction or elevated execution privileges.

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
vers:unknown/* Google / Android		vers:unknown/*
vers:unknown/* Samsung / Mobile Devices		vers:unknown/*

References

79 references

URL	Category
https://security.samsungmobile.com/securityUpdate…	external
https://source.android.com/docs/security/bulletin…	external
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Google heeft kwetsbaarheden verholpen in Android.\n\nSamsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zichzelf verhoogde rechten toe te kennen, toegang te krijgen tot gevoelige gegevens of willekeurige code uit te voeren.\n\nOnder de verholpen kwetsbaarheden zit een aantal kwetsbaarheden die door Google worden gemarkeerd als \u0027Critical\u0027.\n\nGoogle heeft verder, zoals gebruikelijk, weinig detailinformatie beschikbaar gesteld.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12,13 en 14.\n\nSamsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices.\n\nZie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Improper Validation of Array Index",
        "title": "CWE-129"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Reachable Assertion",
        "title": "CWE-617"
      },
      {
        "category": "general",
        "text": "Protection Mechanism Failure",
        "title": "CWE-693"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Rendered UI Layers or Frames",
        "title": "CWE-1021"
      },
      {
        "category": "general",
        "text": "Improper Validation of Syntactic Correctness of Input",
        "title": "CWE-1286"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026\u0026month=6"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Google Android en Samsung Mobile",
    "tracking": {
      "current_release_date": "2026-06-02T08:00:20.751798Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0173",
      "initial_release_date": "2026-06-02T08:00:20.751798Z",
      "revision_history": [
        {
          "date": "2026-06-02T08:00:20.751798Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Mobile Devices"
          }
        ],
        "category": "vendor",
        "name": "Samsung"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-22424",
      "notes": [
        {
          "category": "description",
          "text": "Improper input validation in multiple locations can allow users to access images across accounts, potentially leading to local privilege escalation without additional execution privileges, requiring user interaction for exploitation.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-22424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-22424.json"
        }
      ],
      "title": "CVE-2025-22424"
    },
    {
      "cve": "CVE-2025-22426",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in ComputerEngine.java permits unauthorized access to user URIs, enabling local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-22426 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-22426.json"
        }
      ],
      "title": "CVE-2025-22426"
    },
    {
      "cve": "CVE-2025-32348",
      "notes": [
        {
          "category": "description",
          "text": "A missing permission check in multiple locations allows background activity launches, potentially enabling local privilege escalation without user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32348 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-32348.json"
        }
      ],
      "title": "CVE-2025-32348"
    },
    {
      "cve": "CVE-2025-47384",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "notes": [
        {
          "category": "other",
          "text": "Reachable Assertion",
          "title": "CWE-617"
        },
        {
          "category": "description",
          "text": "A transient denial of service (DoS) condition arises when the MAC is configured with a configuration ID exceeding its supported maximum value, causing temporary service disruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-47384 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47384.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-47384"
    },
    {
      "cve": "CVE-2025-47392",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "Memory corruption occurs during the decoding of corrupted satellite data files containing invalid signature offsets, potentially leading to system instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-47392 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47392.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-47392"
    },
    {
      "cve": "CVE-2025-47400",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A cryptographic vulnerability occurs when data is copied to a destination buffer without verifying the buffer\u0027s size, potentially causing security issues such as buffer overflows.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-47400 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47400.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-47400"
    },
    {
      "cve": "CVE-2025-47401",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "A transient denial of service vulnerability occurs during the processing of target power rate tables in channel configuration, potentially disrupting normal device operation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-47401 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47401.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-47401"
    },
    {
      "cve": "CVE-2025-47403",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "A transient denial-of-service condition may occur during wireless roaming when a malformed Fast Transition response frame with an invalid header structure is processed.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-47403 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47403.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-47403"
    },
    {
      "cve": "CVE-2025-48570",
      "notes": [
        {
          "category": "description",
          "text": "PipTaskOrganizer.java contains multiple confused deputy vulnerabilities enabling background activity launches that may lead to local privilege escalation without user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-48570 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48570.json"
        }
      ],
      "title": "CVE-2025-48570"
    },
    {
      "cve": "CVE-2025-48595",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow vulnerability present in multiple locations can enable local privilege escalation without requiring additional execution privileges or user interaction.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-48595 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48595.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-48595"
    },
    {
      "cve": "CVE-2025-48615",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "description",
          "text": "A resource exhaustion issue in getComponentName of MediaButtonReceiverHolder.java may cause desynchronization in persistence, enabling local privilege escalation without user interaction or additional privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-48615 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48615.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-48615"
    },
    {
      "cve": "CVE-2025-48649",
      "notes": [
        {
          "category": "description",
          "text": "A permissions bypass vulnerability in multiple locations allows resetting user-selected permissions, potentially enabling local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-48649 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48649.json"
        }
      ],
      "title": "CVE-2025-48649"
    },
    {
      "cve": "CVE-2025-48652",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in the performPreInstallChecks function of InstallRepository.kt enables bypassing MDM policy, allowing local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-48652 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48652.json"
        }
      ],
      "title": "CVE-2025-48652"
    },
    {
      "cve": "CVE-2025-59604",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "Memory corruption arises during a memory copy operation due to invalid writes triggered by a null pointer dereference, leading to potential instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-59604 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59604.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-59604"
    },
    {
      "cve": "CVE-2025-59605",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerabilities arise from processing device identifier strings that exceed their expected maximum length, potentially leading to unstable system behavior or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-59605 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59605.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-59605"
    },
    {
      "cve": "CVE-2025-59606",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "description",
          "text": "Memory corruption occurs due to heap memory exhaustion during secure data initialization, leading to writes in invalid memory locations.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-59606 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59606.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-59606"
    },
    {
      "cve": "CVE-2025-64505",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Multiple vulnerabilities in libpng, including heap buffer over-reads and overflows in functions like png_do_quantize and png_image_read_composite, affect various products such as MySQL Workbench, NetApp, Oracle Hyperion, and Apple Software, potentially causing data disclosure, denial of service, or application crashes.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-64505 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-64505.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-64720",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Libpng versions prior to 1.6.51 contain multiple memory handling vulnerabilities including out-of-bounds reads and buffer overflows in functions like png_image_read_composite, png_do_quantize, and png_combine_row, affecting various products such as MySQL Workbench and NetApp devices.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-64720 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-64720.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-64720"
    },
    {
      "cve": "CVE-2025-65018",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "Multiple heap buffer overflow and out-of-bounds read vulnerabilities exist in libpng versions 1.6.0 to before 1.6.51, affecting functions like png_image_finish_read and png_combine_row, impacting products from Oracle, NetApp, and others.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-65018 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-65018.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2025-65018"
    },
    {
      "cve": "CVE-2026-0009",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in the code enables tapjacking vulnerabilities at multiple points, allowing local privilege escalation without requiring additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0009 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0009.json"
        }
      ],
      "title": "CVE-2026-0009"
    },
    {
      "cve": "CVE-2026-0016",
      "notes": [
        {
          "category": "description",
          "text": "A permissions bypass vulnerability in CredentialManagerService.java\u0027s updateProvidersWhenServiceRemoved function allows overriding settings across users, potentially leading to local information disclosure without extra privileges or user interaction.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0016 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0016.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0016"
    },
    {
      "cve": "CVE-2026-0018",
      "notes": [
        {
          "category": "description",
          "text": "AccessibilityManagerService.java contains multiple functions with inadequate input validation, leading to a persistent local denial of service without requiring user interaction or elevated privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0018 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0018.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0018"
    },
    {
      "cve": "CVE-2026-0036",
      "notes": [
        {
          "category": "description",
          "text": "A tapjacking vulnerability in the startAnimation method of StageCoordinator.java enables local privilege escalation without requiring user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0036 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0036.json"
        }
      ],
      "title": "CVE-2026-0036"
    },
    {
      "cve": "CVE-2026-0039",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A remote denial of service vulnerability caused by an integer overflow exists in multiple functions of ubsan_throwing_runtime.cpp, exploitable without user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0039 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0039.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0039"
    },
    {
      "cve": "CVE-2026-0040",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0040 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0040.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0040"
    },
    {
      "cve": "CVE-2026-0041",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A potential integer overflow in multiple functions of ubsan_throwing_runtime.cpp can cause a UBSan failure, resulting in a remote denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0041 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0041.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0041"
    },
    {
      "cve": "CVE-2026-0042",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in ubsan_throwing_runtime.cpp functions can lead to a persistent local denial of service via resource exhaustion without requiring user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0042 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0042.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0042"
    },
    {
      "cve": "CVE-2026-0043",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A vulnerability in ubsan_throwing_runtime.cpp involving integer overflow can lead to persistent denial of service and local privilege escalation without requiring user interaction or elevated privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0043 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0043.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0043"
    },
    {
      "cve": "CVE-2026-0044",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "A vulnerability in ubsan_throwing_runtime.cpp involving an integer overflow can cause a system crash, potentially enabling remote denial of service without user interaction or additional privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0044 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0044.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0044"
    },
    {
      "cve": "CVE-2026-0046",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in InputInterceptor of Letterbox.java enables a tapjacking/overlay attack that can trick users into granting permissions, potentially causing local privilege escalation without user interaction or extra execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0046 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0046.json"
        }
      ],
      "title": "CVE-2026-0046"
    },
    {
      "cve": "CVE-2026-0048",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in WindowState.java enables a tapjacking or overlay attack that can deceive users into granting permissions, potentially resulting in local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0048 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0048.json"
        }
      ],
      "title": "CVE-2026-0048"
    },
    {
      "cve": "CVE-2026-0051",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in multiple functions of ubsan_throwing_runtime.cpp allows remote denial of service via improper input validation, exploitable without user interaction or additional privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0051 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0051.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0051"
    },
    {
      "cve": "CVE-2026-0052",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0052 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0052.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0052"
    },
    {
      "cve": "CVE-2026-0055",
      "notes": [
        {
          "category": "description",
          "text": "A path traversal vulnerability in PackageInstallerService.java\u0027s createSessionInternal method allows local privilege escalation by enabling updates to a Device Policy Controller in unauthorized directories without user interaction or extra privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0055 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0055.json"
        }
      ],
      "title": "CVE-2026-0055"
    },
    {
      "cve": "CVE-2026-0056",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A vulnerability in ResourceTypes.cpp\u0027s setTo function may lead to an out-of-bounds read, potentially causing local information disclosure without user interaction or elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0056 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0056.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0056"
    },
    {
      "cve": "CVE-2026-0059",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap buffer overflow vulnerability in multiple functions of sdp_discovery.cc could enable remote code execution without requiring additional privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0059 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0059.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0059"
    },
    {
      "cve": "CVE-2026-0061",
      "notes": [
        {
          "category": "description",
          "text": "WindowState.java contains multiple functions vulnerable to tapjacking and overlay attacks that can deceive users into granting permissions, enabling local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0061 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0061.json"
        }
      ],
      "title": "CVE-2026-0061"
    },
    {
      "cve": "CVE-2026-0069",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the verifySignature function of ApkChecksums.java can cause resource exhaustion leading to a crash and local denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0069 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0069.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0069"
    },
    {
      "cve": "CVE-2026-0070",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in DevicePolicyManagerService.java allows hiding a critical system package via improper input validation, enabling a local denial of service without user interaction or additional privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0070 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0070.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0070"
    },
    {
      "cve": "CVE-2026-0076",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the validateNode function of ResourceTypes.cpp due to improper bounds checking may enable local privilege escalation without additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0076 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0076.json"
        }
      ],
      "title": "CVE-2026-0076"
    },
    {
      "cve": "CVE-2026-0077",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in resumeConfigurationDispatch within ActivityRecord.java can trigger background application launches, enabling local privilege escalation without user interaction or elevated execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0077 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0077.json"
        }
      ],
      "title": "CVE-2026-0077"
    },
    {
      "cve": "CVE-2026-0078",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in DevicePolicyManagerService.java\u0027s setGlobalProxy method allows local privilege escalation without user interaction due to improper input validation causing persistence desynchronization.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0078 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0078.json"
        }
      ],
      "title": "CVE-2026-0078"
    },
    {
      "cve": "CVE-2026-0080",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple functions of ubsan_throwing_runtime.cpp can cause a crash, resulting in remote denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0080 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0080.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0080"
    },
    {
      "cve": "CVE-2026-0087",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in DomainVerificationService.java\u0027s approvalLevelForDomainInternal function enables hijacking of arbitrary app links, leading to local privilege escalation without user interaction or extra execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0087 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0087.json"
        }
      ],
      "title": "CVE-2026-0087"
    },
    {
      "cve": "CVE-2026-0089",
      "notes": [
        {
          "category": "description",
          "text": "A missing permission check in multiple functions of PackageInstallerService.java enables installation of unverified applications, potentially causing local privilege escalation without user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0089 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0089.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0089"
    },
    {
      "cve": "CVE-2026-0091",
      "notes": [
        {
          "category": "description",
          "text": "An over-privileged shell user in the launcher process enables code execution that results in local privilege escalation without requiring user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0091 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0091.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0091"
    },
    {
      "cve": "CVE-2026-0097",
      "notes": [
        {
          "category": "description",
          "text": "A logic error in multiple locations allows bypassing user interaction during LE device pairing, enabling remote privilege escalation without requiring additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0097 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0097.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0097"
    },
    {
      "cve": "CVE-2026-0100",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "A heap buffer overflow vulnerability in LoadedArsc.cpp can lead to an out-of-bounds write, enabling local privilege escalation without user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-0100 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0100.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-0100"
    },
    {
      "cve": "CVE-2026-21017",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in SecTelephonyProvider before SMR Jun-2026 Release 1 allows local attackers to access privileged files due to improper privilege handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21017 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21017.json"
        }
      ],
      "title": "CVE-2026-21017"
    },
    {
      "cve": "CVE-2026-21025",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Telephony before SMR Jun-2026 Release 1 allows local attackers to access sensitive information due to incorrect privilege assignment, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21025 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21025.json"
        }
      ],
      "title": "CVE-2026-21025"
    },
    {
      "cve": "CVE-2026-21026",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in SpriteWallpaper before SMR Jun-2026 Release 1 allows local attackers to access sensitive information due to improper export of Android application components.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21026 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21026.json"
        }
      ],
      "title": "CVE-2026-21026"
    },
    {
      "cve": "CVE-2026-21027",
      "notes": [
        {
          "category": "description",
          "text": "An improper export vulnerability in Android\u0027s ImsSettings component before SMR June 2026 Release 1 allows local attackers to trigger the logging function.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21027 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21027.json"
        }
      ],
      "title": "CVE-2026-21027"
    },
    {
      "cve": "CVE-2026-21028",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21028 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21028.json"
        }
      ],
      "title": "CVE-2026-21028"
    },
    {
      "cve": "CVE-2026-21029",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Galaxy Editing Service before SMR Jun-2026 Release 1 allows local attackers to perform privileged operations by exploiting improper export of Android application components.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21029 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21029.json"
        }
      ],
      "title": "CVE-2026-21029"
    },
    {
      "cve": "CVE-2026-21030",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to execute privileged functions, posing a significant security risk.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21030 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21030.json"
        }
      ],
      "title": "CVE-2026-21030"
    },
    {
      "cve": "CVE-2026-21031",
      "notes": [
        {
          "category": "description",
          "text": "An improper authorization vulnerability in AppBlock before SMR Jun-2026 Release 1 allows a local attacker to launch arbitrary activities, requiring user interaction to exploit.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21031 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21031.json"
        }
      ],
      "title": "CVE-2026-21031"
    },
    {
      "cve": "CVE-2026-21352",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "DNG SDK versions 1.7.1 2410 and earlier have an out-of-bounds write vulnerability that may allow arbitrary code execution when processing malicious files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21352 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21352.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21352"
    },
    {
      "cve": "CVE-2026-21353",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "description",
          "text": "DNG SDK versions 1.7.1 2410 and earlier contain an Integer Overflow vulnerability that allows arbitrary code execution when a malicious file is opened.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21353 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21353.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21353"
    },
    {
      "cve": "CVE-2026-21367",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A transient denial of service vulnerability arises from processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial network scans, potentially disrupting normal device operations.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21367 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21367.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21367"
    },
    {
      "cve": "CVE-2026-21372",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerabilities arise from sending IOCTL requests with invalid buffer sizes during memcpy operations, potentially leading to unstable system behavior or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21372 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21372.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21372"
    },
    {
      "cve": "CVE-2026-21373",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerabilities can arise when output buffer sizes are not properly validated during IOCTL processing, potentially leading to system instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21373 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21373.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21373"
    },
    {
      "cve": "CVE-2026-21374",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A memory corruption vulnerability arises from insufficient buffer size validation during the processing of auxiliary sensor input/output control commands, potentially leading to unstable system behavior.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21374 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21374.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21374"
    },
    {
      "cve": "CVE-2026-21375",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerabilities can arise when output buffer sizes are not properly validated during IOCTL processing, potentially leading to system instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21375 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21375.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21375"
    },
    {
      "cve": "CVE-2026-21376",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A memory corruption vulnerability exists in a camera sensor driver caused by insufficient validation of output buffer size during IOCTL processing, potentially leading to system instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21376 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21376.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21376"
    },
    {
      "cve": "CVE-2026-21378",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A memory corruption vulnerability exists in a camera sensor driver caused by insufficient validation of output buffer size during IOCTL processing, potentially leading to system instability or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21378 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21378.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21378"
    },
    {
      "cve": "CVE-2026-21380",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerabilities arise from the use of deprecated DMABUF IOCTL calls for video memory management, potentially impacting system stability and security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21380 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21380.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21380"
    },
    {
      "cve": "CVE-2026-21381",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        },
        {
          "category": "description",
          "text": "A transient denial-of-service vulnerability arises when a device processes a service data frame with excessive length during device matching over a Neighborhood Awareness Network protocol connection.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21381 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21381.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-21381"
    },
    {
      "cve": "CVE-2026-21547",
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-21547 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21547.json"
        }
      ],
      "title": "CVE-2026-21547"
    },
    {
      "cve": "CVE-2026-23787",
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-23787 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-23787.json"
        }
      ],
      "title": "CVE-2026-23787"
    },
    {
      "cve": "CVE-2026-24085",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "Memory corruption arises during the processing of display command line information due to an uninitialized variable, potentially leading to unstable system behavior or security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-24085 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-24085.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-24085"
    },
    {
      "cve": "CVE-2026-24089",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Validation of Syntactic Correctness of Input",
          "title": "CWE-1286"
        },
        {
          "category": "description",
          "text": "Memory corruption vulnerability arises from processing fastboot commands with invalid input, potentially leading to unstable system behavior or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-24089 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-24089.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-24089"
    },
    {
      "cve": "CVE-2026-25276",
      "cwe": {
        "id": "CWE-129",
        "name": "Improper Validation of Array Index"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Validation of Array Index",
          "title": "CWE-129"
        },
        {
          "category": "description",
          "text": "A memory corruption vulnerability arises in Strongbox due to the absence of a bounds check, potentially leading to unstable behavior or exploitation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-25276 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-25276.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-25276"
    },
    {
      "cve": "CVE-2026-25277",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in Strongbox leads to memory corruption, potentially compromising system stability and security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-25277 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-25277.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-25277"
    },
    {
      "cve": "CVE-2026-28577",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Rendered UI Layers or Frames",
          "title": "CWE-1021"
        },
        {
          "category": "description",
          "text": "A tapjacking vulnerability in the addWindow method of WindowManagerService.java enables local privilege escalation without user interaction or additional execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28577 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28577.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-28577"
    },
    {
      "cve": "CVE-2026-28578",
      "notes": [
        {
          "category": "description",
          "text": "DevicePolicyManagerService.java contains multiple functions with improper input validation that can cause desynchronization from persistence, potentially resulting in a local denial of service without user interaction or elevated privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28578 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28578.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-28578"
    },
    {
      "cve": "CVE-2026-28580",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A bounds check error in multiple functions can cause persistence desynchronization, leading to local privilege escalation without requiring additional execution privileges or user interaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28580 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28580.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-28580"
    },
    {
      "cve": "CVE-2026-28586",
      "notes": [
        {
          "category": "description",
          "text": "AppOpsService.java contains multiple functions lacking proper permission checks, potentially enabling local information disclosure without user interaction or elevated execution privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28586 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28586.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-28586"
    }
  ]
}

OPENSUSE-SU-2025:15781-1

Vulnerability from csaf_opensuse - Published: 2025-11-28 00:00 - Updated: 2025-11-28 00:00

Summary

libpng16-16-1.6.51-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: libpng16-16-1.6.51-1.1 on GA media

Description of the patch: These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2025-15781

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64506

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64720

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-65018

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

14 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64506/	self
https://www.suse.com/security/cve/CVE-2025-64720/	self
https://www.suse.com/security/cve/CVE-2025-65018/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external
https://www.suse.com/security/cve/CVE-2025-64506	external
https://bugzilla.suse.com/1254158	external
https://www.suse.com/security/cve/CVE-2025-64720	external
https://bugzilla.suse.com/1254159	external
https://www.suse.com/security/cve/CVE-2025-65018	external
https://bugzilla.suse.com/1254160	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libpng16-16-1.6.51-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15781",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15781-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64506 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64506/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64720 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-65018 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-65018/"
      }
    ],
    "title": "libpng16-16-1.6.51-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-11-28T00:00:00Z",
      "generator": {
        "date": "2025-11-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15781-1",
      "initial_release_date": "2025-11-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-11-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-16-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-16-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-32bit-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-16-32bit-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-16-32bit-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-compat-devel-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-compat-devel-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-devel-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-devel-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-devel-32bit-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.51-1.1.aarch64",
                "product": {
                  "name": "libpng16-tools-1.6.51-1.1.aarch64",
                  "product_id": "libpng16-tools-1.6.51-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-16-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-16-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-16-32bit-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-compat-devel-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-devel-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-devel-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-devel-32bit-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.51-1.1.ppc64le",
                "product": {
                  "name": "libpng16-tools-1.6.51-1.1.ppc64le",
                  "product_id": "libpng16-tools-1.6.51-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-16-1.6.51-1.1.s390x",
                  "product_id": "libpng16-16-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-32bit-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-16-32bit-1.6.51-1.1.s390x",
                  "product_id": "libpng16-16-32bit-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
                  "product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-compat-devel-1.6.51-1.1.s390x",
                  "product_id": "libpng16-compat-devel-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
                  "product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
                  "product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-devel-1.6.51-1.1.s390x",
                  "product_id": "libpng16-devel-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-32bit-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-devel-32bit-1.6.51-1.1.s390x",
                  "product_id": "libpng16-devel-32bit-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
                  "product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.51-1.1.s390x",
                "product": {
                  "name": "libpng16-tools-1.6.51-1.1.s390x",
                  "product_id": "libpng16-tools-1.6.51-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-16-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-16-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-32bit-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-16-32bit-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-16-32bit-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-compat-devel-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-compat-devel-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-devel-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-devel-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-devel-32bit-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.51-1.1.x86_64",
                "product": {
                  "name": "libpng16-tools-1.6.51-1.1.x86_64",
                  "product_id": "libpng16-tools-1.6.51-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-16-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-16-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-16-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-16-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-16-32bit-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-16-32bit-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-16-32bit-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-16-32bit-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-compat-devel-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-compat-devel-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-compat-devel-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-compat-devel-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-devel-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-devel-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-devel-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-devel-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-32bit-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-devel-32bit-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-32bit-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-devel-32bit-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-32bit-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-devel-32bit-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-32bit-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-devel-32bit-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.51-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64"
        },
        "product_reference": "libpng16-tools-1.6.51-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.51-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le"
        },
        "product_reference": "libpng16-tools-1.6.51-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.51-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x"
        },
        "product_reference": "libpng16-tools-1.6.51-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.51-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
        },
        "product_reference": "libpng16-tools-1.6.51-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-64506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64506",
          "url": "https://www.suse.com/security/cve/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254158 for CVE-2025-64506",
          "url": "https://bugzilla.suse.com/1254158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64506"
    },
    {
      "cve": "CVE-2025-64720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha x 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64720",
          "url": "https://www.suse.com/security/cve/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254159 for CVE-2025-64720",
          "url": "https://bugzilla.suse.com/1254159"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64720"
    },
    {
      "cve": "CVE-2025-65018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-65018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
          "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-65018",
          "url": "https://www.suse.com/security/cve/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254160 for CVE-2025-65018",
          "url": "https://bugzilla.suse.com/1254160"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-16-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-compat-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-32bit-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-devel-x86-64-v3-1.6.51-1.1.x86_64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.aarch64",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.ppc64le",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.s390x",
            "openSUSE Tumbleweed:libpng16-tools-1.6.51-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-65018"
    }
  ]
}

OPENSUSE-SU-2025:15797-1

Vulnerability from csaf_opensuse - Published: 2025-12-04 00:00 - Updated: 2025-12-04 00:00

Summary

libpng12-0-1.2.59-4.1 on GA media

Severity

Moderate

Notes

Title of the patch: libpng12-0-1.2.59-4.1 on GA media

Description of the patch: These are all security issues fixed in the libpng12-0-1.2.59-4.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2025-15797

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

5 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libpng12-0-1.2.59-4.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libpng12-0-1.2.59-4.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15797",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15797-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      }
    ],
    "title": "libpng12-0-1.2.59-4.1 on GA media",
    "tracking": {
      "current_release_date": "2025-12-04T00:00:00Z",
      "generator": {
        "date": "2025-12-04T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15797-1",
      "initial_release_date": "2025-12-04T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-12-04T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-0-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-0-1.2.59-4.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-0-32bit-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-0-32bit-1.2.59-4.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-compat-devel-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-compat-devel-1.2.59-4.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-compat-devel-32bit-1.2.59-4.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-devel-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-devel-1.2.59-4.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.59-4.1.aarch64",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.59-4.1.aarch64",
                  "product_id": "libpng12-devel-32bit-1.2.59-4.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-0-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-0-1.2.59-4.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-0-32bit-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-0-32bit-1.2.59-4.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-compat-devel-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-compat-devel-1.2.59-4.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-devel-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-devel-1.2.59-4.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.59-4.1.ppc64le",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.59-4.1.ppc64le",
                  "product_id": "libpng12-devel-32bit-1.2.59-4.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-0-1.2.59-4.1.s390x",
                  "product_id": "libpng12-0-1.2.59-4.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-0-32bit-1.2.59-4.1.s390x",
                  "product_id": "libpng12-0-32bit-1.2.59-4.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-compat-devel-1.2.59-4.1.s390x",
                  "product_id": "libpng12-compat-devel-1.2.59-4.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
                  "product_id": "libpng12-compat-devel-32bit-1.2.59-4.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-devel-1.2.59-4.1.s390x",
                  "product_id": "libpng12-devel-1.2.59-4.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.59-4.1.s390x",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.59-4.1.s390x",
                  "product_id": "libpng12-devel-32bit-1.2.59-4.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-0-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-0-1.2.59-4.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-0-32bit-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-0-32bit-1.2.59-4.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-compat-devel-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-compat-devel-1.2.59-4.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-compat-devel-32bit-1.2.59-4.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-devel-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-devel-1.2.59-4.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.59-4.1.x86_64",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.59-4.1.x86_64",
                  "product_id": "libpng12-devel-32bit-1.2.59-4.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-0-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-0-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-0-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-0-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-32bit-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-0-32bit-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-32bit-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-0-32bit-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-32bit-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-0-32bit-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-32bit-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-0-32bit-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-compat-devel-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-compat-devel-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-compat-devel-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-compat-devel-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-32bit-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-32bit-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-32bit-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-devel-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-devel-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-devel-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-devel-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-32bit-1.2.59-4.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.aarch64"
        },
        "product_reference": "libpng12-devel-32bit-1.2.59-4.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-32bit-1.2.59-4.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.ppc64le"
        },
        "product_reference": "libpng12-devel-32bit-1.2.59-4.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-32bit-1.2.59-4.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.s390x"
        },
        "product_reference": "libpng12-devel-32bit-1.2.59-4.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-32bit-1.2.59-4.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.x86_64"
        },
        "product_reference": "libpng12-devel-32bit-1.2.59-4.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.x86_64",
          "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.x86_64",
          "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.x86_64",
          "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
          "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.x86_64",
          "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.aarch64",
          "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.ppc64le",
          "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.s390x",
          "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-0-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-0-32bit-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-compat-devel-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-devel-1.2.59-4.1.x86_64",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.aarch64",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.ppc64le",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.s390x",
            "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.59-4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    }
  ]
}

OPENSUSE-SU-2026:20017-1

Vulnerability from csaf_opensuse - Published: 2026-01-12 11:14 - Updated: 2026-01-12 11:14

Summary

Security update for libpng16

Severity

Important

Notes

Title of the patch: Security update for libpng16

Description of the patch: This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when processing 8-bit input with `convert_to_8bit` enabled (bsc#1254158). - CVE-2025-64720: out-of-bounds read in `png_image_read_composite` when processing palette images with `PNG_FLAG_OPTIMIZE_ALPHA` enabled (bsc#1254159). - CVE-2025-65018: heap buffer overflow in `png_image_finish_read` when processing specially crafted 16-bit interlaced PNGs with 8-bit output format (bsc#1254160). - CVE-2025-66293: out-of-bounds read of the `png_sRGB_base` array when processing palette PNG images with partial transparency and gamma correction (bsc#1254480).

Patchnames: openSUSE-Leap-16.0-131

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 19 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64506

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 19 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64720

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 19 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-65018

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 19 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-66293

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected products

Recommended 19 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64	—	Vendor Fix

Threats

Impact important

References

22 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1254157	self
https://bugzilla.suse.com/1254158	self
https://bugzilla.suse.com/1254159	self
https://bugzilla.suse.com/1254160	self
https://bugzilla.suse.com/1254480	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64506/	self
https://www.suse.com/security/cve/CVE-2025-64720/	self
https://www.suse.com/security/cve/CVE-2025-65018/	self
https://www.suse.com/security/cve/CVE-2025-66293/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external
https://www.suse.com/security/cve/CVE-2025-64506	external
https://bugzilla.suse.com/1254158	external
https://www.suse.com/security/cve/CVE-2025-64720	external
https://bugzilla.suse.com/1254159	external
https://www.suse.com/security/cve/CVE-2025-65018	external
https://bugzilla.suse.com/1254160	external
https://www.suse.com/security/cve/CVE-2025-66293	external
https://bugzilla.suse.com/1254480	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libpng16",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libpng16 fixes the following issues:\n\n- CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices\n  (bsc#1254157).\n- CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when processing 8-bit input with `convert_to_8bit`\n  enabled (bsc#1254158).\n- CVE-2025-64720: out-of-bounds read in `png_image_read_composite` when processing palette images with\n  `PNG_FLAG_OPTIMIZE_ALPHA` enabled (bsc#1254159).\n- CVE-2025-65018: heap buffer overflow in `png_image_finish_read` when processing specially crafted 16-bit interlaced\n  PNGs with 8-bit output format (bsc#1254160).\n- CVE-2025-66293: out-of-bounds read of the `png_sRGB_base` array when processing palette PNG images with partial\n  transparency and gamma correction (bsc#1254480).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-131",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20017-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254157",
        "url": "https://bugzilla.suse.com/1254157"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254158",
        "url": "https://bugzilla.suse.com/1254158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254159",
        "url": "https://bugzilla.suse.com/1254159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254160",
        "url": "https://bugzilla.suse.com/1254160"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254480",
        "url": "https://bugzilla.suse.com/1254480"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64506 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64506/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64720 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-65018 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-65018/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-66293 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-66293/"
      }
    ],
    "title": "Security update for libpng16",
    "tracking": {
      "current_release_date": "2026-01-12T11:14:46Z",
      "generator": {
        "date": "2026-01-12T11:14:46Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20017-1",
      "initial_release_date": "2026-01-12T11:14:46Z",
      "revision_history": [
        {
          "date": "2026-01-12T11:14:46Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.44-160000.3.1.aarch64",
                "product": {
                  "name": "libpng16-16-1.6.44-160000.3.1.aarch64",
                  "product_id": "libpng16-16-1.6.44-160000.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
                "product": {
                  "name": "libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
                  "product_id": "libpng16-compat-devel-1.6.44-160000.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.44-160000.3.1.aarch64",
                "product": {
                  "name": "libpng16-devel-1.6.44-160000.3.1.aarch64",
                  "product_id": "libpng16-devel-1.6.44-160000.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.44-160000.3.1.aarch64",
                "product": {
                  "name": "libpng16-tools-1.6.44-160000.3.1.aarch64",
                  "product_id": "libpng16-tools-1.6.44-160000.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.44-160000.3.1.ppc64le",
                "product": {
                  "name": "libpng16-16-1.6.44-160000.3.1.ppc64le",
                  "product_id": "libpng16-16-1.6.44-160000.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
                "product": {
                  "name": "libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
                  "product_id": "libpng16-compat-devel-1.6.44-160000.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.44-160000.3.1.ppc64le",
                "product": {
                  "name": "libpng16-devel-1.6.44-160000.3.1.ppc64le",
                  "product_id": "libpng16-devel-1.6.44-160000.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.44-160000.3.1.ppc64le",
                "product": {
                  "name": "libpng16-tools-1.6.44-160000.3.1.ppc64le",
                  "product_id": "libpng16-tools-1.6.44-160000.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.44-160000.3.1.s390x",
                "product": {
                  "name": "libpng16-16-1.6.44-160000.3.1.s390x",
                  "product_id": "libpng16-16-1.6.44-160000.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.44-160000.3.1.s390x",
                "product": {
                  "name": "libpng16-compat-devel-1.6.44-160000.3.1.s390x",
                  "product_id": "libpng16-compat-devel-1.6.44-160000.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.44-160000.3.1.s390x",
                "product": {
                  "name": "libpng16-devel-1.6.44-160000.3.1.s390x",
                  "product_id": "libpng16-devel-1.6.44-160000.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.44-160000.3.1.s390x",
                "product": {
                  "name": "libpng16-tools-1.6.44-160000.3.1.s390x",
                  "product_id": "libpng16-tools-1.6.44-160000.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-16-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-16-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-compat-devel-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-devel-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-devel-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng16-tools-1.6.44-160000.3.1.x86_64",
                "product": {
                  "name": "libpng16-tools-1.6.44-160000.3.1.x86_64",
                  "product_id": "libpng16-tools-1.6.44-160000.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.44-160000.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64"
        },
        "product_reference": "libpng16-16-1.6.44-160000.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.44-160000.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le"
        },
        "product_reference": "libpng16-16-1.6.44-160000.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.44-160000.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x"
        },
        "product_reference": "libpng16-16-1.6.44-160000.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-16-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.44-160000.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64"
        },
        "product_reference": "libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.44-160000.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le"
        },
        "product_reference": "libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.44-160000.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x"
        },
        "product_reference": "libpng16-compat-devel-1.6.44-160000.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.44-160000.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64"
        },
        "product_reference": "libpng16-devel-1.6.44-160000.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.44-160000.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le"
        },
        "product_reference": "libpng16-devel-1.6.44-160000.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.44-160000.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x"
        },
        "product_reference": "libpng16-devel-1.6.44-160000.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-devel-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.44-160000.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64"
        },
        "product_reference": "libpng16-tools-1.6.44-160000.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.44-160000.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le"
        },
        "product_reference": "libpng16-tools-1.6.44-160000.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.44-160000.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x"
        },
        "product_reference": "libpng16-tools-1.6.44-160000.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-tools-1.6.44-160000.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        },
        "product_reference": "libpng16-tools-1.6.44-160000.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-12T11:14:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-64506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64506",
          "url": "https://www.suse.com/security/cve/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254158 for CVE-2025-64506",
          "url": "https://bugzilla.suse.com/1254158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-12T11:14:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64506"
    },
    {
      "cve": "CVE-2025-64720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha x 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64720",
          "url": "https://www.suse.com/security/cve/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254159 for CVE-2025-64720",
          "url": "https://bugzilla.suse.com/1254159"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-12T11:14:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64720"
    },
    {
      "cve": "CVE-2025-65018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-65018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-65018",
          "url": "https://www.suse.com/security/cve/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254160 for CVE-2025-65018",
          "url": "https://bugzilla.suse.com/1254160"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-12T11:14:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-65018"
    },
    {
      "cve": "CVE-2025-66293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-66293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0027s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0027s internal state management. Upgrade to libpng 1.6.52 or later.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
          "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-66293",
          "url": "https://www.suse.com/security/cve/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254480 for CVE-2025-66293",
          "url": "https://bugzilla.suse.com/1254480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-16-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-16-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-compat-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-devel-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.3.1.x86_64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.aarch64",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.ppc64le",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.s390x",
            "openSUSE Leap 16.0:libpng16-tools-1.6.44-160000.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-12T11:14:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-66293"
    }
  ]
}

RHSA-2026:6732

Vulnerability from csaf_redhat - Published: 2026-04-07 06:21 - Updated: 2026-05-29 16:21

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: libpng: * libpng-1.6.56-1.hum1 (aarch64, x86_64) * libpng-devel-1.6.56-1.hum1 (aarch64, x86_64) * libpng-static-1.6.56-1.hum1 (aarch64, x86_64) * libpng-tools-1.6.56-1.hum1 (aarch64, x86_64) * libpng-1.6.56-1.hum1.src (source)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-28162

A flaw was found in libpng. A local attacker can exploit a buffer overflow vulnerability in the pngimage utility when processed with AddressSanitizer (ASan). This flaw causes memory leaks, leading to high memory usage and ultimately rendering the program unresponsive, resulting in a denial of service.

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2025-28164

A flaw was found in libpng. This buffer overflow vulnerability allows a local attacker to cause a denial of service (DoS) by exploiting the `png_create_read_struct()` function. This can lead to the affected system becoming unresponsive or crashing.

5.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-64505

A heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access.

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-64506

A buffer over read flaw has been discovered in libpng. A heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries.

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2025-64720

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-65018

A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds.

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-66293

An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng's simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-3713

A flaw was found in libpng. A local attacker could exploit this vulnerability by manipulating the width/height arguments in the `do_pnm2png` function of the `pnm2png` component. This manipulation causes a heap-based buffer overflow, which could lead to information disclosure and denial of service (DoS).

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-22695

A flaw was found in libpng, a reference library for processing PNG (Portable Network Graphics) image files. A local attacker could exploit a heap buffer over-read vulnerability in the `png_image_finish_read` function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with an 8-bit output format and non-minimal row stride. This could lead to a denial of service (DoS) and potentially information disclosure.

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-22801

A flaw was found in libpng, a reference library for PNG (Portable Network Graphics) raster image files. An integer truncation vulnerability exists in the png_write_image_16bit and png_write_image_8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes, leading to a heap buffer over-read. This can result in information disclosure or a denial of service (DoS) to the system.

6.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-25646

A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification.

7.0 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-33416

A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-33636

A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.

7.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWE-124 - Buffer Underwrite ('Buffer Underflow')

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:libpng-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:libpng-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

114 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:6732	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2025-65018	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2025-64720	external
https://access.redhat.com/security/cve/CVE-2025-64506	external
https://access.redhat.com/security/cve/CVE-2025-64505	external
https://access.redhat.com/security/cve/CVE-2026-22801	external
https://access.redhat.com/security/cve/CVE-2026-22695	external
https://access.redhat.com/security/cve/CVE-2025-28164	external
https://access.redhat.com/security/cve/CVE-2025-28162	external
https://access.redhat.com/security/cve/CVE-2026-33636	external
https://access.redhat.com/security/cve/CVE-2026-33416	external
https://access.redhat.com/security/cve/CVE-2025-66293	external
https://access.redhat.com/security/cve/CVE-2026-3713	external
https://access.redhat.com/security/cve/CVE-2026-25646	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-28162	self
https://bugzilla.redhat.com/show_bug.cgi?id=2433407	external
https://www.cve.org/CVERecord?id=CVE-2025-28162	external
https://nvd.nist.gov/vuln/detail/CVE-2025-28162	external
https://gist.github.com/kittener/fbfdb9b5610c6b3d…	external
https://github.com/pnggroup/libpng/issues/656	external
https://access.redhat.com/security/cve/CVE-2025-28164	self
https://bugzilla.redhat.com/show_bug.cgi?id=2433398	external
https://www.cve.org/CVERecord?id=CVE-2025-28164	external
https://nvd.nist.gov/vuln/detail/CVE-2025-28164	external
https://gist.github.com/kittener/506516f8c2217800…	external
https://github.com/pnggroup/libpng/issues/655	external
https://access.redhat.com/security/cve/CVE-2025-64505	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416905	external
https://www.cve.org/CVERecord?id=CVE-2025-64505	external
https://nvd.nist.gov/vuln/detail/CVE-2025-64505	external
https://github.com/pnggroup/libpng/commit/6a528eb…	external
https://github.com/pnggroup/libpng/pull/748	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2025-64506	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416906	external
https://www.cve.org/CVERecord?id=CVE-2025-64506	external
https://nvd.nist.gov/vuln/detail/CVE-2025-64506	external
https://github.com/pnggroup/libpng/commit/2bd84c0…	external
https://github.com/pnggroup/libpng/pull/749	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2025-64720	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416904	external
https://www.cve.org/CVERecord?id=CVE-2025-64720	external
https://nvd.nist.gov/vuln/detail/CVE-2025-64720	external
https://github.com/pnggroup/libpng/commit/08da33b…	external
https://github.com/pnggroup/libpng/issues/686	external
https://github.com/pnggroup/libpng/pull/751	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2025-65018	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416907	external
https://www.cve.org/CVERecord?id=CVE-2025-65018	external
https://nvd.nist.gov/vuln/detail/CVE-2025-65018	external
https://github.com/pnggroup/libpng/commit/16b5e38…	external
https://github.com/pnggroup/libpng/commit/218612d…	external
https://github.com/pnggroup/libpng/issues/755	external
https://github.com/pnggroup/libpng/pull/757	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2025-66293	self
https://bugzilla.redhat.com/show_bug.cgi?id=2418711	external
https://www.cve.org/CVERecord?id=CVE-2025-66293	external
https://nvd.nist.gov/vuln/detail/CVE-2025-66293	external
https://github.com/pnggroup/libpng/commit/788a624…	external
https://github.com/pnggroup/libpng/commit/a05a48b…	external
https://github.com/pnggroup/libpng/issues/764	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-3713	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445566	external
https://www.cve.org/CVERecord?id=CVE-2026-3713	external
https://nvd.nist.gov/vuln/detail/CVE-2026-3713	external
https://github.com/biniamf/pocs/tree/main/pnm2png	external
https://github.com/pnggroup/libpng/	external
https://github.com/pnggroup/libpng/issues/794	external
https://vuldb.com/?ctiid.349658	external
https://vuldb.com/?id.349658	external
https://vuldb.com/?submit.761996	external
https://access.redhat.com/security/cve/CVE-2026-22695	self
https://bugzilla.redhat.com/show_bug.cgi?id=2428825	external
https://www.cve.org/CVERecord?id=CVE-2026-22695	external
https://nvd.nist.gov/vuln/detail/CVE-2026-22695	external
https://github.com/pnggroup/libpng/commit/e4f7ad4ea2	external
https://github.com/pnggroup/libpng/issues/778	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-22801	self
https://bugzilla.redhat.com/show_bug.cgi?id=2428824	external
https://www.cve.org/CVERecord?id=CVE-2026-22801	external
https://nvd.nist.gov/vuln/detail/CVE-2026-22801	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-25646	self
https://bugzilla.redhat.com/show_bug.cgi?id=2438542	external
https://www.cve.org/CVERecord?id=CVE-2026-25646	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25646	external
http://www.openwall.com/lists/oss-security/2026/02/09/7	external
https://github.com/pnggroup/libpng/commit/01d03b8…	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-33416	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451805	external
https://www.cve.org/CVERecord?id=CVE-2026-33416	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33416	external
https://github.com/pnggroup/libpng/commit/2301926…	external
https://github.com/pnggroup/libpng/commit/7ea9eea…	external
https://github.com/pnggroup/libpng/commit/a3a2144…	external
https://github.com/pnggroup/libpng/commit/c1b0318…	external
https://github.com/pnggroup/libpng/pull/824	external
https://github.com/pnggroup/libpng/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-33636	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451819	external
https://www.cve.org/CVERecord?id=CVE-2026-33636	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33636	external
https://github.com/pnggroup/libpng/commit/7734cda…	external
https://github.com/pnggroup/libpng/commit/aba9f18…	external
https://github.com/pnggroup/libpng/security/advis…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nlibpng:\n  * libpng-1.6.56-1.hum1 (aarch64, x86_64)\n  * libpng-devel-1.6.56-1.hum1 (aarch64, x86_64)\n  * libpng-static-1.6.56-1.hum1 (aarch64, x86_64)\n  * libpng-tools-1.6.56-1.hum1 (aarch64, x86_64)\n  * libpng-1.6.56-1.hum1.src (source)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:6732",
        "url": "https://access.redhat.com/errata/RHSA-2026:6732"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-65018",
        "url": "https://access.redhat.com/security/cve/CVE-2025-65018"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64720",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64720"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64506",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64506"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64505",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64505"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22801",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22801"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22695",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22695"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-28164",
        "url": "https://access.redhat.com/security/cve/CVE-2025-28164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-28162",
        "url": "https://access.redhat.com/security/cve/CVE-2025-28162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33636",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33636"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33416",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33416"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-66293",
        "url": "https://access.redhat.com/security/cve/CVE-2025-66293"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-3713",
        "url": "https://access.redhat.com/security/cve/CVE-2026-3713"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25646",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25646"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6732.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-05-29T16:21:56+00:00",
      "generator": {
        "date": "2026-05-29T16:21:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:6732",
      "initial_release_date": "2026-04-07T06:21:37+00:00",
      "revision_history": [
        {
          "date": "2026-04-07T06:21:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-18T20:01:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-29T16:21:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng-main@aarch64",
                "product": {
                  "name": "libpng-main@aarch64",
                  "product_id": "libpng-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpng@1.6.56-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng-main@src",
                "product": {
                  "name": "libpng-main@src",
                  "product_id": "libpng-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpng@1.6.56-1.hum1?arch=source\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng-main@x86_64",
                "product": {
                  "name": "libpng-main@x86_64",
                  "product_id": "libpng-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpng@1.6.56-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libpng-main@aarch64"
        },
        "product_reference": "libpng-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libpng-main@src"
        },
        "product_reference": "libpng-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libpng-main@x86_64"
        },
        "product_reference": "libpng-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-28162",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-01-27T16:02:53.673282+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng. A local attacker can exploit a buffer overflow vulnerability in the pngimage utility when processed with AddressSanitizer (ASan). This flaw causes memory leaks, leading to high memory usage and ultimately rendering the program unresponsive, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Denial of Service via buffer overflow in pngimage utility",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-28162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-28162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-28162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-28162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-28162"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/kittener/fbfdb9b5610c6b3db0d5dea045a07c60",
          "url": "https://gist.github.com/kittener/fbfdb9b5610c6b3db0d5dea045a07c60"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/656",
          "url": "https://github.com/pnggroup/libpng/issues/656"
        }
      ],
      "release_date": "2026-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Denial of Service via buffer overflow in pngimage utility"
    },
    {
      "cve": "CVE-2025-28164",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-01-27T16:01:50.214802+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433398"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng. This buffer overflow vulnerability allows a local attacker to cause a denial of service (DoS) by exploiting the `png_create_read_struct()` function. This can lead to the affected system becoming unresponsive or crashing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a MODERATE impact vulnerability affecting libpng versions 1.6.43-1.6.46. A local attacker can exploit a buffer overflow in the `png_create_read_struct()` function, leading to a denial of service. Exploitation requires the attacker to have local access to the system and provide a specially crafted PNG file.\n\nFor `java-17-openjdk-headless` and `java-21-openjdk-headless`, while the affected code is present in the bundled sources, it is not exercised by these headless packages.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-28164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433398",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433398"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-28164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-28164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-28164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-28164"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20",
          "url": "https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/655",
          "url": "https://github.com/pnggroup/libpng/issues/655"
        }
      ],
      "release_date": "2026-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "To mitigate the risk of denial of service, users should avoid processing untrusted PNG image files with applications that utilize libpng. Exercise caution when opening or viewing PNG files from unknown or suspicious sources.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function"
    },
    {
      "cve": "CVE-2025-64505",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-11-25T00:00:57.884428+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416905"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG heap buffer overflow via malformed palette index",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. It affects applications that process specially crafted PNG files using the vulnerable `libpng` library. Exploitation requires user interaction, where a victim must open or process a malicious PNG image, leading to a heap buffer over-read. This could result in information disclosure or application crash.\n\njava-*-openjdk-headless packages do not contain libsplashscreen.so, hence are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416905",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416905"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37",
          "url": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/pull/748",
          "url": "https://github.com/pnggroup/libpng/pull/748"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42"
        }
      ],
      "release_date": "2025-11-24T23:38:40.405000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: LIBPNG heap buffer overflow via malformed palette index"
    },
    {
      "cve": "CVE-2025-64506",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-11-25T00:01:01.690031+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416906"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer over read flaw has been discovered in libpng. A heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG heap buffer over-read",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. A heap buffer over-read in libpng\u0027s `png_write_image_8bit` function can occur when processing specially crafted 8-bit PNG images. Exploitation requires user interaction, such as opening a malicious PNG file, and could lead to an application level denial of service or information disclosure.\n\njava-*-openjdk-headless packages do not contain libsplashscreen.so, hence are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416906",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416906"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64506",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64506",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821",
          "url": "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/pull/749",
          "url": "https://github.com/pnggroup/libpng/pull/749"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6"
        }
      ],
      "release_date": "2025-11-24T23:41:09.207000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: LIBPNG heap buffer over-read"
    },
    {
      "cve": "CVE-2025-64720",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-11-25T00:00:54.081073+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416904"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha \u00d7 257 required by the simplified PNG API.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat products. An out-of-bounds read in libpng can occur when processing specially crafted palette images with `PNG_FLAG_OPTIMIZE_ALPHA` enabled. Successful exploitation requires a user to process a malicious PNG file, leading to potential application crash or information disclosure.\n\njava-*-openjdk-headless packages do not contain libsplashscreen.so, hence are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416904",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416904"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64720",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64720",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643",
          "url": "https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/686",
          "url": "https://github.com/pnggroup/libpng/issues/686"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/pull/751",
          "url": "https://github.com/pnggroup/libpng/pull/751"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww"
        }
      ],
      "release_date": "2025-11-24T23:45:38.315000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libpng: LIBPNG buffer overflow"
    },
    {
      "cve": "CVE-2025-65018",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-11-25T00:01:05.570152+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416907"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG heap buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat products. A heap buffer overflow exists in the libpng library\u0027s png_image_finish_read function when processing specially crafted 16-bit interlaced PNG images with an 8-bit output format. Successful exploitation requires a user or an automated system to process a malicious PNG file, which could lead to application crashes or arbitrary code execution.\n\njava-*-openjdk-headless packages do not contain libsplashscreen.so, hence are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416907",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416907"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-65018",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65018",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d",
          "url": "https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
          "url": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/755",
          "url": "https://github.com/pnggroup/libpng/issues/755"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/pull/757",
          "url": "https://github.com/pnggroup/libpng/pull/757"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g"
        }
      ],
      "release_date": "2025-11-24T23:50:18.294000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libpng: LIBPNG heap buffer overflow"
    },
    {
      "cve": "CVE-2025-66293",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-12-03T21:00:59.956903+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418711"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng\u0027s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0027s internal state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG out-of-bounds read in png_image_read_composite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important as it affects libpng, a widely used library for PNG image processing. The flaw is due to an out-of-bounds read in libpng\u2019s simplified API when handling specially crafted PNG images containing partial transparency and gamma correction data. Successful exploitation could result in information disclosure or cause application crashes in applications processing untrusted PNG content.\n\nFor `java-17-openjdk-headless` and `java-21-openjdk-headless`, while the affected code is present in the bundled sources, it is not exercised by these headless packages.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418711"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-66293",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66293",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1",
          "url": "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a",
          "url": "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/764",
          "url": "https://github.com/pnggroup/libpng/issues/764"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f"
        }
      ],
      "release_date": "2025-12-03T20:33:57.086000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libpng: LIBPNG out-of-bounds read in png_image_read_composite"
    },
    {
      "cve": "CVE-2026-3713",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-03-08T07:00:54.323109+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445566"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng. A local attacker could exploit this vulnerability by manipulating the width/height arguments in the `do_pnm2png` function of the `pnm2png` component. This manipulation causes a heap-based buffer overflow, which could lead to information disclosure and denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This MODERATE impact heap-based buffer overflow in the `pnm2png` utility of libpng requires local execution to exploit.\n\nThe libpng packages shipped with Red Hat Enterprise Linux are not affected by this vulnerability.\n\nThe issue originates from the pnm2png utility present in the upstream libpng source tree under the contrib/pngminus/ directory. This component is not part of the libpng build process in RHEL, is not included in the packaging specification, and is not present in any shipped binary RPMs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3713"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445566",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445566"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3713",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3713"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3713",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3713"
        },
        {
          "category": "external",
          "summary": "https://github.com/biniamf/pocs/tree/main/pnm2png",
          "url": "https://github.com/biniamf/pocs/tree/main/pnm2png"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/",
          "url": "https://github.com/pnggroup/libpng/"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/794",
          "url": "https://github.com/pnggroup/libpng/issues/794"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?ctiid.349658",
          "url": "https://vuldb.com/?ctiid.349658"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?id.349658",
          "url": "https://vuldb.com/?id.349658"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?submit.761996",
          "url": "https://vuldb.com/?submit.761996"
        }
      ],
      "release_date": "2026-03-08T06:02:11.204000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid processing untrusted image data with the `pnm2png` utility. Restrict execution of `pnm2png` to trusted users and ensure that only trusted image files are processed.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service"
    },
    {
      "cve": "CVE-2026-22695",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-01-13T00:08:52.403246+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2428825"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng, a reference library for processing PNG (Portable Network Graphics) image files. A local attacker could exploit a heap buffer over-read vulnerability in the `png_image_finish_read` function by tricking a user into processing a specially crafted interlaced 16-bit PNG file with an 8-bit output format and non-minimal row stride. This could lead to a denial of service (DoS) and potentially information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. A heap buffer over-read flaw exists in the libpng library when processing specially crafted interlaced 16-bit PNG images with 8-bit output format and non-minimal row stride. This issue requires user interaction, as an attacker would need to trick a user into opening a malicious PNG file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22695"
        },
        {
          "category": "external",
          "summary": "RHBZ#2428825",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428825"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22695",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22695"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22695",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22695"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
          "url": "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/e4f7ad4ea2",
          "url": "https://github.com/pnggroup/libpng/commit/e4f7ad4ea2"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/778",
          "url": "https://github.com/pnggroup/libpng/issues/778"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp"
        }
      ],
      "release_date": "2026-01-12T22:55:40.204000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted PNG image files. Applications that process PNG images should be configured to restrict processing of untrusted or unverified content where possible.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read"
    },
    {
      "cve": "CVE-2026-22801",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-01-13T00:08:42.581146+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2428824"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng, a reference library for PNG (Portable Network Graphics) raster image files. An integer truncation vulnerability exists in the png_write_image_16bit and png_write_image_8bit simplified write API functions. A local attacker could exploit this flaw by providing a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes, leading to a heap buffer over-read. This can result in information disclosure or a denial of service (DoS) to the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. An integer truncation flaw in the libpng simplified write API functions (`png_write_image_16bit`, `png_write_image_8bit`) can lead to a heap buffer over-read. Exploitation requires an application to process specially crafted input that provides a negative row stride or a stride exceeding 65535 bytes, potentially resulting in denial of service or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22801"
        },
        {
          "category": "external",
          "summary": "RHBZ#2428824",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428824"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22801"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8"
        }
      ],
      "release_date": "2026-01-12T22:57:58.288000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API"
    },
    {
      "cve": "CVE-2026-25646",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-02-10T18:01:28.232408+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2438542"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user\u0027s display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG has a heap buffer overflow in png_set_quantize",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For `java-17-openjdk-headless` and `java-21-openjdk-headless`, while the affected code is present in the bundled sources, it is not exercised by these headless packages.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25646"
        },
        {
          "category": "external",
          "summary": "RHBZ#2438542",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438542"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25646",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25646"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25646",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25646"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/02/09/7",
          "url": "http://www.openwall.com/lists/oss-security/2026/02/09/7"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88",
          "url": "https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3"
        }
      ],
      "release_date": "2026-02-10T17:04:38.501000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libpng: LIBPNG has a heap buffer overflow in png_set_quantize"
    },
    {
      "cve": "CVE-2026-33416",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-26T18:01:55.592413+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Arbitrary code execution due to use-after-free vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33416"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33416",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33416"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33416",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33416"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb",
          "url": "https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667",
          "url": "https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25",
          "url": "https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1",
          "url": "https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/pull/824",
          "url": "https://github.com/pnggroup/libpng/pull/824"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j"
        }
      ],
      "release_date": "2026-03-26T16:48:54.174000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, avoid processing untrusted PNG image files with applications that utilize libpng. Restricting the source of PNG images to trusted origins can limit the attack surface.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Arbitrary code execution due to use-after-free vulnerability"
    },
    {
      "cve": "CVE-2026-33636",
      "cwe": {
        "id": "CWE-124",
        "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
      },
      "discovery_date": "2026-03-26T18:02:51.339603+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451819"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to dereferencing pointers before the start of the row buffer and writing expanded pixel data to underflowed positions. This flaw can result in information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libpng-main@aarch64",
          "Red Hat Hardened Images:libpng-main@src",
          "Red Hat Hardened Images:libpng-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33636"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451819",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451819"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33636"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869",
          "url": "https://github.com/pnggroup/libpng/commit/7734cda20cf1236aef60f3bbd2267c97bbb40869"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3",
          "url": "https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2"
        }
      ],
      "release_date": "2026-03-26T16:51:58.289000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-07T06:21:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6732"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libpng-main@aarch64",
            "Red Hat Hardened Images:libpng-main@src",
            "Red Hat Hardened Images:libpng-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion"
    }
  ]
}

SUSE-SU-2025:21217-1

Vulnerability from csaf_suse - Published: 2025-12-16 08:31 - Updated: 2025-12-16 08:31

Summary

Security update for libpng16

Severity

Important

Notes

Title of the patch: Security update for libpng16

Description of the patch: This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158). - CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159). - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).

Patchnames: SUSE-SLE-Micro-6.0-536

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64506

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64720

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-65018

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-66293

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected products

Recommended 3 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64	—	Vendor Fix

Threats

Impact important

References

24 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1254157	self
https://bugzilla.suse.com/1254158	self
https://bugzilla.suse.com/1254159	self
https://bugzilla.suse.com/1254160	self
https://bugzilla.suse.com/1254480	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64506/	self
https://www.suse.com/security/cve/CVE-2025-64720/	self
https://www.suse.com/security/cve/CVE-2025-65018/	self
https://www.suse.com/security/cve/CVE-2025-66293/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external
https://www.suse.com/security/cve/CVE-2025-64506	external
https://bugzilla.suse.com/1254158	external
https://www.suse.com/security/cve/CVE-2025-64720	external
https://bugzilla.suse.com/1254159	external
https://www.suse.com/security/cve/CVE-2025-65018	external
https://bugzilla.suse.com/1254160	external
https://www.suse.com/security/cve/CVE-2025-66293	external
https://bugzilla.suse.com/1254480	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libpng16",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libpng16 fixes the following issues:\n\n- CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480).\n- CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157).\n- CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158).\n- CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159).\n- CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-536",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_21217-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:21217-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202521217-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:21217-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-December/023593.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254157",
        "url": "https://bugzilla.suse.com/1254157"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254158",
        "url": "https://bugzilla.suse.com/1254158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254159",
        "url": "https://bugzilla.suse.com/1254159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254160",
        "url": "https://bugzilla.suse.com/1254160"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254480",
        "url": "https://bugzilla.suse.com/1254480"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64506 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64506/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64720 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-65018 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-65018/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-66293 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-66293/"
      }
    ],
    "title": "Security update for libpng16",
    "tracking": {
      "current_release_date": "2025-12-16T08:31:52Z",
      "generator": {
        "date": "2025-12-16T08:31:52Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:21217-1",
      "initial_release_date": "2025-12-16T08:31:52Z",
      "revision_history": [
        {
          "date": "2025-12-16T08:31:52Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-2.1.aarch64",
                "product": {
                  "name": "libpng16-16-1.6.43-2.1.aarch64",
                  "product_id": "libpng16-16-1.6.43-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-2.1.s390x",
                "product": {
                  "name": "libpng16-16-1.6.43-2.1.s390x",
                  "product_id": "libpng16-16-1.6.43-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-2.1.x86_64",
                "product": {
                  "name": "libpng16-16-1.6.43-2.1.x86_64",
                  "product_id": "libpng16-16-1.6.43-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-2.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64"
        },
        "product_reference": "libpng16-16-1.6.43-2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-2.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x"
        },
        "product_reference": "libpng16-16-1.6.43-2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-2.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        },
        "product_reference": "libpng16-16-1.6.43-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:31:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-64506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64506",
          "url": "https://www.suse.com/security/cve/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254158 for CVE-2025-64506",
          "url": "https://bugzilla.suse.com/1254158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:31:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64506"
    },
    {
      "cve": "CVE-2025-64720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha x 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64720",
          "url": "https://www.suse.com/security/cve/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254159 for CVE-2025-64720",
          "url": "https://bugzilla.suse.com/1254159"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:31:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64720"
    },
    {
      "cve": "CVE-2025-65018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-65018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-65018",
          "url": "https://www.suse.com/security/cve/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254160 for CVE-2025-65018",
          "url": "https://bugzilla.suse.com/1254160"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:31:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-65018"
    },
    {
      "cve": "CVE-2025-66293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-66293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0027s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0027s internal state management. Upgrade to libpng 1.6.52 or later.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
          "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-66293",
          "url": "https://www.suse.com/security/cve/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254480 for CVE-2025-66293",
          "url": "https://bugzilla.suse.com/1254480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.aarch64",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.s390x",
            "SUSE Linux Micro 6.0:libpng16-16-1.6.43-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-66293"
    }
  ]
}

SUSE-SU-2025:21220-1

Vulnerability from csaf_suse - Published: 2025-12-16 08:25 - Updated: 2025-12-16 08:25

Summary

Security update for libpng16

Severity

Important

Notes

Title of the patch: Security update for libpng16

Patchnames: SUSE-SLE-Micro-6.1-354

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64506

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-64720

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-65018

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-66293

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact important

References

24 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1254157	self
https://bugzilla.suse.com/1254158	self
https://bugzilla.suse.com/1254159	self
https://bugzilla.suse.com/1254160	self
https://bugzilla.suse.com/1254480	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64506/	self
https://www.suse.com/security/cve/CVE-2025-64720/	self
https://www.suse.com/security/cve/CVE-2025-65018/	self
https://www.suse.com/security/cve/CVE-2025-66293/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external
https://www.suse.com/security/cve/CVE-2025-64506	external
https://bugzilla.suse.com/1254158	external
https://www.suse.com/security/cve/CVE-2025-64720	external
https://bugzilla.suse.com/1254159	external
https://www.suse.com/security/cve/CVE-2025-65018	external
https://bugzilla.suse.com/1254160	external
https://www.suse.com/security/cve/CVE-2025-66293	external
https://bugzilla.suse.com/1254480	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libpng16",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libpng16 fixes the following issues:\n\n- CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480).\n- CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157).\n- CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158).\n- CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159).\n- CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-354",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_21220-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:21220-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202521220-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:21220-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-December/023591.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254157",
        "url": "https://bugzilla.suse.com/1254157"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254158",
        "url": "https://bugzilla.suse.com/1254158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254159",
        "url": "https://bugzilla.suse.com/1254159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254160",
        "url": "https://bugzilla.suse.com/1254160"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254480",
        "url": "https://bugzilla.suse.com/1254480"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64506 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64506/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64720 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-65018 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-65018/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-66293 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-66293/"
      }
    ],
    "title": "Security update for libpng16",
    "tracking": {
      "current_release_date": "2025-12-16T08:25:26Z",
      "generator": {
        "date": "2025-12-16T08:25:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:21220-1",
      "initial_release_date": "2025-12-16T08:25:26Z",
      "revision_history": [
        {
          "date": "2025-12-16T08:25:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
                  "product_id": "libpng16-16-1.6.43-slfo.1.1_2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
                  "product_id": "libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
                  "product_id": "libpng16-16-1.6.43-slfo.1.1_2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng16-16-1.6.43-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "libpng16-16-1.6.43-slfo.1.1_2.1.x86_64",
                  "product_id": "libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x"
        },
        "product_reference": "libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng16-16-1.6.43-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "libpng16-16-1.6.43-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-64506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64506",
          "url": "https://www.suse.com/security/cve/CVE-2025-64506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254158 for CVE-2025-64506",
          "url": "https://bugzilla.suse.com/1254158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64506"
    },
    {
      "cve": "CVE-2025-64720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component \u2264 alpha x 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64720",
          "url": "https://www.suse.com/security/cve/CVE-2025-64720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254159 for CVE-2025-64720",
          "url": "https://bugzilla.suse.com/1254159"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64720"
    },
    {
      "cve": "CVE-2025-65018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-65018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-65018",
          "url": "https://www.suse.com/security/cve/CVE-2025-65018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254160 for CVE-2025-65018",
          "url": "https://bugzilla.suse.com/1254160"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-65018"
    },
    {
      "cve": "CVE-2025-66293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-66293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0027s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0027s internal state management. Upgrade to libpng 1.6.52 or later.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-66293",
          "url": "https://www.suse.com/security/cve/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254480 for CVE-2025-66293",
          "url": "https://bugzilla.suse.com/1254480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-16T08:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-66293"
    }
  ]
}

SUSE-SU-2025:4383-1

Vulnerability from csaf_suse - Published: 2025-12-12 13:13 - Updated: 2025-12-12 13:13

Summary

Security update for libpng12

Severity

Moderate

Notes

Title of the patch: Security update for libpng12

Description of the patch: This update for libpng12 fixes the following issues: - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)

Patchnames: SUSE-2025-4383,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4383

CVE-2025-64505

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-1.2.50-20.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-32bit-1.2.50-20.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-compat-devel-1.2.50-20.6.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-devel-1.2.50-20.6.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

8 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1254157	self
https://www.suse.com/security/cve/CVE-2025-64505/	self
https://www.suse.com/security/cve/CVE-2025-64505	external
https://bugzilla.suse.com/1254157	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libpng12",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libpng12 fixes the following issues:\n\n- CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-4383,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4383",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_4383-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:4383-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20254383-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:4383-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-December/023535.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254157",
        "url": "https://bugzilla.suse.com/1254157"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-64505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-64505/"
      }
    ],
    "title": "Security update for libpng12",
    "tracking": {
      "current_release_date": "2025-12-12T13:13:47Z",
      "generator": {
        "date": "2025-12-12T13:13:47Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:4383-1",
      "initial_release_date": "2025-12-12T13:13:47Z",
      "revision_history": [
        {
          "date": "2025-12-12T13:13:47Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.aarch64",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.aarch64",
                  "product_id": "libpng12-0-1.2.50-20.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.aarch64",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.aarch64",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.aarch64",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.aarch64",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-64bit-1.2.50-20.6.1.aarch64_ilp32",
                "product": {
                  "name": "libpng12-0-64bit-1.2.50-20.6.1.aarch64_ilp32",
                  "product_id": "libpng12-0-64bit-1.2.50-20.6.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-64bit-1.2.50-20.6.1.aarch64_ilp32",
                "product": {
                  "name": "libpng12-compat-devel-64bit-1.2.50-20.6.1.aarch64_ilp32",
                  "product_id": "libpng12-compat-devel-64bit-1.2.50-20.6.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-64bit-1.2.50-20.6.1.aarch64_ilp32",
                "product": {
                  "name": "libpng12-devel-64bit-1.2.50-20.6.1.aarch64_ilp32",
                  "product_id": "libpng12-devel-64bit-1.2.50-20.6.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.i586",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.i586",
                  "product_id": "libpng12-0-1.2.50-20.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.i586",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.i586",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.i586",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.i586",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.ppc64le",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.ppc64le",
                  "product_id": "libpng12-0-1.2.50-20.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.ppc64le",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.ppc64le",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.ppc64le",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.ppc64le",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.s390",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.s390",
                  "product_id": "libpng12-0-1.2.50-20.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.s390",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.s390",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.s390",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.s390",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-0-1.2.50-20.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-0-32bit-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-0-32bit-1.2.50-20.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-compat-devel-32bit-1.2.50-20.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.50-20.6.1.s390x",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.50-20.6.1.s390x",
                  "product_id": "libpng12-devel-32bit-1.2.50-20.6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpng12-0-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-0-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-0-1.2.50-20.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-0-32bit-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-0-32bit-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-0-32bit-1.2.50-20.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-compat-devel-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-compat-devel-1.2.50-20.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-compat-devel-32bit-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-compat-devel-32bit-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-compat-devel-32bit-1.2.50-20.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-devel-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-devel-1.2.50-20.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpng12-devel-32bit-1.2.50-20.6.1.x86_64",
                "product": {
                  "name": "libpng12-devel-32bit-1.2.50-20.6.1.x86_64",
                  "product_id": "libpng12-devel-32bit-1.2.50-20.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-1.2.50-20.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-1.2.50-20.6.1.x86_64"
        },
        "product_reference": "libpng12-0-1.2.50-20.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-0-32bit-1.2.50-20.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-32bit-1.2.50-20.6.1.x86_64"
        },
        "product_reference": "libpng12-0-32bit-1.2.50-20.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-compat-devel-1.2.50-20.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-compat-devel-1.2.50-20.6.1.x86_64"
        },
        "product_reference": "libpng12-compat-devel-1.2.50-20.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpng12-devel-1.2.50-20.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-devel-1.2.50-20.6.1.x86_64"
        },
        "product_reference": "libpng12-devel-1.2.50-20.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-64505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-64505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-1.2.50-20.6.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-32bit-1.2.50-20.6.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-compat-devel-1.2.50-20.6.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-devel-1.2.50-20.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-64505",
          "url": "https://www.suse.com/security/cve/CVE-2025-64505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254157 for CVE-2025-64505",
          "url": "https://bugzilla.suse.com/1254157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-32bit-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-compat-devel-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-devel-1.2.50-20.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-0-32bit-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-compat-devel-1.2.50-20.6.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libpng12-devel-1.2.50-20.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-12-12T13:13:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-64505"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-64505 (GCVE-0-2025-64505)

Tags

Sightings

Nomenclature