CVE-2025-65018
HIGHlibpng 1.6.0-1.6.50 - Heap-based Buffer Overflow in png_image_finish_read
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-65018. PoCs published by Neo-Neo6, bohemian-miser.
AI-analyzed exploit summary This PoC exploits a heap buffer overflow in libpng on PS4/PS5 by modifying a PNG's IHDR chunk to force 16-bit RGB with Adam7 interlacing, causing a crash (CE-34196-3) when opened in the Gallery app. The script manipulates PNG metadata to trigger the vulnerability.
Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
Exploits (2)
This PoC exploits a heap buffer overflow in libpng on PS4/PS5 by modifying a PNG's IHDR chunk to force 16-bit RGB with Adam7 interlacing, causing a crash (CE-34196-3) when opened in the Gallery app. The script manipulates PNG metadata to trigger the vulnerability.
This repository contains a working exploit PoC for CVE-2025-65018, a heap overflow vulnerability in libpng's handling of 16-bit interlaced PNG images. The exploit crafts a malicious PNG file to overwrite a function pointer and redirect execution to a shell-spawning function.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H