CVE-2026-25646: Legacy Libpng Flaw Poses RCE Risk

Back Esecurityplanet

CVE-2026-25646: Legacy Libpng Flaw Poses RCE Risk

Esecurityplanet • February 12, 2026

Share: View original

CVE -2026-25646: Legacy Libpng Flaw Poses RCE Risk. A decades-old libpng flaw exposes widely used systems to denial-of-service and potential code ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026-25646: Libpng Vulnerability Enables RCE and DoS Attacks A critical vulnerability identified as CVE-2026-25646 has been found in libpng, affecting numerous operating systems and web browsers. This flaw, a heap buffer overflow in the png_set_quantize() function, could allow attackers to crash applications or execute arbitrary code. The vulnerability was published on February 10, 2026. 2 sources 57

Extracted Entities

Attack Types (3)

DDoS Denial of Service Remote Code Execution

CVEs (1)

Platforms (1)

Vulnerabilities (1)

Legacy Libpng Flaw