GCVE-110-MAGEIA-2026-70

Advisory Published

Vulnetix · Advisory published March 28, 2026

Use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE. (CVE-2026-33416) Out-of-bounds read/write in the palette expansion on ARM Neon. (CVE-2026-33636)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	libpng	0 (affected), 1.6.38-1.5.mga9 (unaffected)	—

Aliases

CVE-2026-33416 CVE-2026-33636

References

Updated libpng packages fix security vulnerabilities

advisory

Updated libpng packages fix security vulnerabilities

issue

Updated libpng packages fix security vulnerabilities

issue

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON