6.8
Moyenne
CVE-2026-22801 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
Description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libpng 1.6 | premières → < 1.6.54 | 1.6.54 |
Autres CVE de libpng
Les 13 CVE de libpng →
CVE-2026-40930
LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files
5.4
Moyenne
CVE-2026-34757
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
5.1
Moyenne
CVE-2026-33636
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
7.6
Élevée
CVE-2026-33416
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…
7.5
Élevée