CVE-2026-25646: Libpng Vulnerability Enables RCE and DoS Attacks

CVE-2026-25646: Libpng Vulnerability Enables RCE and DoS Attacks

First seen 12 Feb 2026, 21:16 UTC CybersecuritynewsEsecurityplanet 78% similarity 57.4

Article Content

Browse articles
ThreatCluster

A critical vulnerability identified as CVE-2026-25646 has been found in libpng, affecting numerous operating systems and web browsers. This flaw, a heap buffer overflow in the png_set_quantize() function, could allow attackers to crash applications or execute arbitrary code. The vulnerability was published on February 10, 2026.

ThreatCluster AI

Timeline

2026-02-10
CVE-2026-25646 published
2026-02-10
Cybersecuritynews article published
2026-02-12
Esecurityplanet article published

Community

Browse all →