Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

pnggroup — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting pnggroup. AI-powered Chinese analysis, POCs, and references for each vulnerability.

PNGGroup develops enterprise software solutions with a primary focus on document management and workflow automation systems. Historically, their products have been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for their 12 recorded CVEs. Notable security characteristics include insufficient input validation and inadequate access controls in several components. While no major public security incidents have been documented, the consistent pattern of vulnerabilities in their software suggests a need for improved secure coding practices and more rigorous vulnerability management across their product portfolio.

Found 13 results / 13 Clear Filters
Top products by pnggroup: libpng
CVE ID Title CVSS Severity Published
CVE-2026-40930 LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body — libpng CWE-436 5.4 Medium 2026-06-04
CVE-2026-34757 LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure — libpng CWE-416 5.1 Medium 2026-04-09
CVE-2026-33636 LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 — libpng CWE-125 7.6 High 2026-03-26
CVE-2026-33416 LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` — libpng CWE-416 7.5 High 2026-03-26
CVE-2026-3713 pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow — libpng CWE-122 5.3 Medium 2026-03-08
CVE-2026-25646 LIBPNG has a heap buffer overflow in png_set_quantize — libpng CWE-122 8.3 High 2026-02-10
CVE-2026-22801 LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_* — libpng CWE-125 6.8 Medium 2026-01-12
CVE-2026-22695 LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix) — libpng CWE-125 6.1 Medium 2026-01-12
CVE-2025-66293 LIBPNG has an out-of-bounds read in png_image_read_composite — libpng CWE-125 7.1 High 2025-12-03
CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` — libpng CWE-787 7.1 High 2025-11-24
CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication — libpng CWE-125 7.1 High 2025-11-24
CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images — libpng CWE-125 6.1 Medium 2025-11-24
CVE-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index — libpng CWE-125 6.1 Medium 2025-11-24

This page lists every published CVE security advisory associated with pnggroup. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.