VDB
GCVE-VVD-MAGEIA-2026-10
GCVE-VVD-MAGEIA-2026-10
Advisory Published
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled
(regression from CVE-2025-65018 fix). (CVE-2026-22695)
LIBPNG has an integer truncation causing heap buffer over-read in
png_image_write_*. (CVE-2026-22801)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libformula | 0 (affected), 1.1.6-14.1.mga9 (unaffected) | — |
| Mageia | ant-contrib | 0 (affected), 1.0-0.39.b3.1.mga9 (unaffected) | — |
| Mageia | libpng | 0 (affected), 1.6.38-1.3.mga9 (unaffected), 0 (affected), 1.6.38-1.3.mga9 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.