libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

🗓️ 22 Apr 2026 15:44:55Reported by RedHatType

libpng heap over-read in png_image_finish_read allows DoS and information disclosure via crafted sixteen bit PNG to eight bit output.

Reporter	Title	Published	Views	Family All 315
Tenable Nessus	Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2026-1390)	5 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : firefox (ALAS2023-2026-1435)	19 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3171 (ALAS-2026-3171)	19 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-051 (ALASFIREFOX-2026-051)	19 Feb 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0055: libpng (ALINUX3-SA-2026:0055)	24 Mar 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0248: java-17-openjdk (ALINUX3-SA-2026:0248)	13 Aug 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0249: java-1.8.0-openjdk (ALINUX3-SA-2026:0249)	13 Aug 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : libpng (ALSA-2026:3405)	4 Mar 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : libpng (ALSA-2026:3551)	6 Mar 202600:00	–	nessus
Tenable Nessus	AlmaLinux 8 : mingw-libpng (ALSA-2026:4306)	13 Mar 202600:00	–	nessus

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-22695
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea
github	www.github.com/pnggroup/libpng/commit/e4f7ad4ea2
github	www.github.com/pnggroup/libpng/issues/778
github	www.github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22695
cve	www.cve.org/CVERecord

21 Aug 2026 12:24Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.1 - 7.1

EPSS0.00175

SSVC