Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Heads up, #Debian 11 admins! A critical libpng update (DLA-4481-1) just dropped patching three CVEs (CVE-2026-22695, etc.). Read more: 👉 https://tinyurl.com/54nsbcjd #Security https://t.co/WCqqcT2OV5
Post summary
Debian 11 admins are warned that a critical libpng update (DLA-4481-1) has been released to patch CVE-2026-22695 and two other CVEs, with no additional exploitation or technical detail provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libpng | libpng | - | - | - |