A vulnerability was discovered in LIBPNG 1.8.0, a reference library for processing PNG raster image files. The issue lies in the push-mode APNG parser, where three inter-frame chunk discard paths clear the chunk-header flag without consuming the chunk body and CRC. This allows attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk header on the next call to `png_p [truncated]
CVE-2026-25646 is an out-of-bounds read vulnerability in the libpng library, specifically in the png_set_quantize() API function. This vulnerability exists in versions prior to 1.6.55. When the function is called with no histogram and the number of colors in the palette exceeds twice the maximum supported by the user's display, certain palettes can cause the function to enter an infinite loop, reading pas [truncated]
