CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

CVE-2026-112008

A flaw was found in libmng. A heap-based buffer overflow vulnerability exists in the mngreadordr function due to improper buffer allocation sizing when parsing chunk records in Multiple-image Network Graphics MNG files. An attacker could exploit this vulnerability by enticing a user or system to...

CVE-2026-112008

The libmng library (versions through 2.0.3 ) is vulnerable to a heap-based buffer overflow within the mng_read_ordr() function. The root cause is an incorrect calculation of buffer size , where ORDR entry buffers are incorrectly sized based on 5-byte on-wire records instead of 8-byte in-memory en...

CVE-2026-112008 libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...

EUVD-2026-103461

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...