Important: mingw-libpng security update
MinGW Windows Libpng library. Security Fix(es): * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
MinGW Windows Libpng library. Security Fix(es): * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
05 / REFERENCES
Further evidence
- https://access.redhat.com/errata/RHSA-2026:0125
- https://access.redhat.com/security/cve/CVE-2025-64720
- https://access.redhat.com/security/cve/CVE-2025-65018
- https://access.redhat.com/security/cve/CVE-2025-66293
- https://bugzilla.redhat.com/2416904
- https://bugzilla.redhat.com/2416907
- https://bugzilla.redhat.com/2418711
- https://errata.almalinux.org/8/ALSA-2026-0125.html