VDB
BDU%3A2026-01048
BDU%3A2026-01048
PUBLISHED
CVSS 6.599999904632568 MEDIUM
Уязвимость функции png_image_read_direct_scaled() библиотеки libpng, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
6.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Guy Eric Schalnat Andreas Dilger Glenn Randers-Pehrson | libpng |
Timeline
- Jan 30, 2026 CVE Published
References
- https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp url
- https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea url
- https://github.com/pnggroup/libpng/commit/e4f7ad4ea2 url
- https://github.com/pnggroup/libpng/issues/778 url
- https://github.com/pnggroup/libpng/releases/tag/v1.6.54 advisory