Skip to content
CVE-2026-25646: Libpng Vulnerability Enables RCE and DoS Attacks

CVE-2026-25646: Libpng Vulnerability Enables RCE and DoS Attacks

First seen 12 Feb 2026, 21:16 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 16:10 UTC

A critical vulnerability identified as CVE-2026-25646 has been found in libpng, affecting numerous operating systems and web browsers. This flaw, a heap buffer overflow in the png_set_quantize() function, could allow attackers to crash applications or execute arbitrary code. The vulnerability was published on February 10, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 185d ago How this analysis works

Timeline

2026-02-10
CVE-2026-25646 published
2026-02-10
Cybersecuritynews article published
2026-02-12
Esecurityplanet article published

More articles in this cluster (2)

Following this threat?

Track CVE-2026-25646 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed