VYPR

libpng

by Google

CVEs (1)

  • CVE-2026-58936CriNov 2, 2026
    risk 0.64cvss 9.8epss 0.00

    In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.