Back Linuxsecurity

Fedora 43: mingw-libpng Critical Buffer Overflow Advisories 2025

Linuxsecurity •LinuxSecurity Advisories • December 9, 2025

[ 1 ] Bug #2417472 - CVE-2025-64720 mingw-libpng: LIBPNG buffer overflow [fedora-43] [ 2 ] Bug #2417486 - CVE-2025-65018 mingw-libpng: LIBPNG heap buffer overflow [fedora-43] [ 3 ] Bug #2417491 - CVE-2025-64506 mingw-libpng: LIBPNG heap buffer over-read [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f54c75f2f9' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43: Multiple Critical Buffer Overflow Vulnerabilities in mingw-libpng Fedora 43 has reported multiple critical buffer overflow vulnerabilities in the mingw-libpng library, including CVE-2025-66293, CVE-2025-64505, CVE-2025-64720, CVE-2025-65018, and CVE-2025-64506. These vulnerabilities could allow attackers to exploit heap buffer overflows and over-reads, potentially compromising affected systems. Users are advised to update to libpng-1.6.53 to mitigate these risks. 3 sources 25

Extracted Entities

Companies (1)

Fedora

CVEs (3)

CVE-2025-64506 CVE-2025-64720 CVE-2025-65018