Back Cybersecuritynews

PNG Vulnerabilities Allow Attackers to Trigger Process Crashes, Leak Sensitive Information

Cybersecuritynews •Abinaya • April 1, 2026

Two high-severity vulnerabilities have been discovered in libpng, the widely used reference library for reading and writing PNG images. These flaws allow attackers to trigger process crashes, leak sensitive information, and potentially execute arbitrary code by convincing a system to process a crafted PNG file. The vulnerabilities affect any software that parses malformed images, making […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PNG Vulnerabilities Discovered in libpng Library Security researchers have identified two high-severity vulnerabilities in libpng, the reference library used for processing PNG image files. These vulnerabilities allow remote attackers to trigger process crashes and leak sensitive heap memory, potentially leading to arbitrary code execution. The flaws arise from the processing of specially crafted PNG images, affecting any software that parses malformed images. The vulnerabilities are classified as critical due to their potential for exploitation in various applications. Affected systems include any software utilizing libpng for image processing. The vulnerabilities have been assigned CVE identifiers, although specific CVEs were not mentioned in the articles. As of now, security advisories are expected to be released to address these issues. Users and organizations are urged to monitor for updates and apply patches as they become available. 2 sources 68

Extracted Entities

PNG Vulnerabilities Allow Attackers to Trigger Process Crashes, Leak Sensitive Information

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)