CVE-2026-33416
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
Published Mar 26, 2026 · updated Jun 17, 2026 · libpng libpng
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, and each alias a heap-allocated buffer between and , sharing a single allocation across two structs with independent lifetimes. The aliasing has been present since at least libpng 1.0, and the aliasing since at least 1.2.1. Both affect all prior release lines sets (256-byte buffer) and sets (768-byte buffer). In both cases, calling (with or ) frees the buffer through while the corresponding pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to or has the same effect, because both functions call internally before reallocating the buffer. Version 1.6.56 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 26, 2026 · NIST NVD
Detected
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, and each alias a heap-allocated buffer between and , sharing a single allocation across two structs with independent lifetimes. The aliasing has been present since at least libpng 1.0, and the aliasing since at least 1.2.1. Bo
Jun 17, 2026 · NIST NVD
Updated
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, and each alias a heap-allocated buffer between and , sharing a single allocation across two structs with independent lifetimes. The aliasing has been present since at least libpng 1.0, and the aliasing since at least 1.2.1. Bo
Affected
- cpe libpng/libpngversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33416
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33416
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, and each alias a heap-allocated buffer between and ,
nvd.nist.gov