Back Gbhackers

PNG Vulnerabilities Allow Attackers to Trigger Crashes and Leak Sensitive Data

Gbhackers •Divya • March 31, 2026

Security researchers have disclosed two high-severity vulnerabilities in libpng, the widely deployed reference library used for processing Portable Network Graphics (PNG) image files. These critical flaws allow remote attackers to trigger process crashes, leak sensitive heap memory, and potentially achieve arbitrary code execution by tricking applications into processing specially crafted, standards-compliant PNG images. Both vulnerabilities require […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PNG Vulnerabilities Discovered in libpng Library Security researchers have identified two high-severity vulnerabilities in libpng, the reference library used for processing PNG image files. These vulnerabilities allow remote attackers to trigger process crashes and leak sensitive heap memory, potentially leading to arbitrary code execution. The flaws arise from the processing of specially crafted PNG images, affecting any software that parses malformed images. The vulnerabilities are classified as critical due to their potential for exploitation in various applications. Affected systems include any software utilizing libpng for image processing. The vulnerabilities have been assigned CVE identifiers, although specific CVEs were not mentioned in the articles. As of now, security advisories are expected to be released to address these issues. Users and organizations are urged to monitor for updates and apply patches as they become available. 2 sources 68

PNG Vulnerabilities Allow Attackers to Trigger Crashes and Leak Sensitive Data

The full story

Extracted Entities

MITRE ATT&CK (1)

Platforms (2)