Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libpng in Rootio: Uncontrolled Memory Access
ROOT-OS-DEBIAN-12-CVE-2025-28164
Summary
A security issue was found in the libpng library used by Rootio. If exploited, this could allow an attacker to run malicious code on your system. Root has released a patch to fix this issue, so it's recommended to update your Rootio system to the latest version of libpng to stay secure.
What to do
- Update rootio-libpng1.6 to version 1.6.39-2+deb12u4.root.io.19.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | – | rootio-libpng1.6 |
< 1.6.39-2+deb12u4.root.io.19 Fix: upgrade to 1.6.39-2+deb12u4.root.io.19
|
Original title
CVE-2025-28164 in rootio-libpng1.6 - Patched by Root
Original description
Root has patched CVE-2025-28164 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available.
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026