Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, there was an out-of-bounds read and write vulnerability in libpng’s ARM/AArch64 Neon-optimized palette expansion path. When...

CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating par...

The vulnerability of the libpng library lies in the lack of checks for a sufficient number of input pixels. This allows an attacker to exploit the system to disclose protected information and perform denial-of-service attacks.

The vulnerability of the libpng library lies in the lack of checks for a sufficient number of input pixels during the processing of the last partial portion of the palette extension in the ARM/AArch64 Neon optimization path. Exploiting this vulnerability can allow an attacker to disclose sensitiv...

libpng 缓冲区错误漏洞

libpng is an open-source PNG reference library developed by The PNG Development Group. It allows for the creation, reading, and writing of PNG graphic files. Versions of LIBPNG from 1.6.36 to 1.6.55 contain a buffer error vulnerability. This vulnerability stems from out-of-bound read and write...