| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| AUTHORS.md | 2025-11-21 | 1.6 kB | |
| libpng-1.6.51.tar.gz | 2025-11-21 | 1.6 MB | |
| libpng-1.6.51.tar.xz | 2025-11-21 | 1.1 MB | |
| LICENSE.md | 2025-11-21 | 5.3 kB | |
| lpng1651.7z | 2025-11-21 | 1.1 MB | |
| lpng1651.zip | 2025-11-21 | 1.9 MB | |
| README.md | 2025-11-21 | 2.1 kB | |
| TRADEMARK.md | 2025-11-21 | 343 Bytes | |
| Totals: 8 Items | 5.5 MB | 5,504 | |
libpng 1.6.51 - November 21, 2025
This is a public release of libpng, intended for use in production code.
Files available for download
Source files with LF line endings (for Unix/Linux):
- libpng-1.6.51.tar.xz (LZMA-compressed, recommended)
- libpng-1.6.51.tar.gz (deflate-compressed)
Source files with CRLF line endings (for Windows):
- lpng1651.7z (LZMA-compressed, recommended)
- lpng1651.zip (deflate-compressed)
Other information:
Changes from version 1.6.50 to version 1.6.51
- Fixed CVE-2025-64505 (moderate severity):
Heap buffer overflow in
png_do_quantizevia malformed palette index. (Reported by Samsung; analyzed by Fabio Gritti.) - Fixed CVE-2025-64506 (moderate severity):
Heap buffer over-read in
png_write_image_8bitwith 8-bit input andconvert_to_8bitenabled. (Reported by Samsung and weijinjinnihao@users.noreply.github.com; analyzed by Fabio Gritti.) - Fixed CVE-2025-64720 (high severity):
Buffer overflow in
png_image_read_compositevia incorrect palette premultiplication. (Reported by Samsung; analyzed by John Bowler.) - Fixed CVE-2025-65018 (high severity):
Heap buffer overflow in
png_combine_rowtriggered viapng_image_finish_read. (Reported by yosiimich@users.noreply.github.com.) - Fixed a memory leak in
png_set_quantize. (Reported by Samsung; analyzed by Fabio Gritti.) - Removed the experimental and incomplete ERROR_NUMBERS code. (Contributed by Tobias Stoeckmann.)
- Improved the RISC-V vector extension support; required RVV 1.0 or newer. (Contributed by Filip Wasil.)
- Added GitHub Actions workflows for automated testing.
- Performed various refactorings and cleanups.
Send comments/corrections/commendations to png-mng-implement at lists.sf.net. Subscription is required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement to subscribe.