CVE-2026-22695 | pnggroup libpng up to 1.6.53 Simplified API png_image_finish_read out-of-bounds (ID 778)

January 13, 2026 Yanac

A vulnerability, which was classified as critical, was found in pnggroup libpng up to 1.6.53. Affected by this vulnerability is the function png_image_finish_read of the component Simplified API. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-22695. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More