{"id":"ROOT-OS-DEBIAN-13-CVE-2025-64506","summary":"CVE-2025-64506 in rootio-libpng1.6 - Patched by Root","details":"Root has patched CVE-2025-64506 in the rootio-libpng1.6 package for Root:Debian:13. Multiple fixed versions available.","aliases":["CVE-2025-64506","GHSA-qpr4-xm66-hww6","ROOT-OS-DEBIAN-12-CVE-2025-64506"],"modified":"2026-07-27T14:00:22.835748963Z","published":"2026-01-08T10:36:56Z","withdrawn":"2026-07-27T14:00:22.835748682Z","upstream":["CVE-2025-64506"],"database_specific":{"distro":"debian","source":"Root","distro_version":"13"},"affected":[{"package":{"name":"rootio-libpng1.6","ecosystem":"Root:Debian:13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.48-1.root.io.8"}]}],"database_specific":{"root_patched":true,"source":"https://api.root.io/external/osv/ROOT-OS-DEBIAN-13-CVE-2025-64506.json","total_fixed_versions":1,"upstream_version":"1.6.48-1","all_fixed_versions":["1.6.48-1.root.io.8"],"root_patch_version":"root.io.8"}}],"schema_version":"1.7.5"}