libmng CVE debriefs

CVE-2026-112008

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. This vulnerability can lead to memory corruption and application instability. Defenders responsible for maintaining and securing applications that use the libmng library s [truncated]