SUSE-SU-2026:24130-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: - version update to 1.6.59: Fixed CVE-2026-46675 medium severity: Use-after-free of zlib input in...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.59-i586-1slack15.0.txz: Upgraded. Fixed use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP...

CVE-2026-46675

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...

CVE-2026-46675

libpng 1.6.0 through 1.6.58 contains a use-after-free of zlib input in pngreadend. When an application calls pngreadend after pngreadinfo without reading image rows, a crafted zTXt, iTXt or iCCP chunk can make libpng abandon decompression while zlib still expects input, leaving a stale input...

CVE-2026-46675

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...

UBUNTU-CVE-2026-46675

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the pngreadend process when it is called without reading image rows. An attacker can cause an application crash by supplying a specially crafted PNG image that triggers incomplete decompression of certain metadata...