Skip to content
OpenAdvisories
High DSA-6138-1 1 CVE

libpng1.6 - security update

Published Feb 17, 2026 · Updated Feb 17, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 12 libpng1.6 1.6.39-2+deb12u3
Debian · 13 libpng1.6 1.6.48-1+deb13u3

Vulnerabilities 1

  • High 8.3

    LIBPNG has a heap buffer overflow in png_set_quantize

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function i…