Summary
MinGW Windows Libpng library.
Security Fix(es):
* libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | mingw32-libpng | 0:1.6.34-3.el8_10 |
| Rocky Linux · 8 | mingw32-libpng-debuginfo | 0:1.6.34-3.el8_10 |
| Rocky Linux · 8 | mingw32-libpng-static | 0:1.6.34-3.el8_10 |
| Rocky Linux · 8 | mingw64-libpng | 0:1.6.34-3.el8_10 |
| Rocky Linux · 8 | mingw64-libpng-debuginfo | 0:1.6.34-3.el8_10 |
| Rocky Linux · 8 | mingw64-libpng-static | 0:1.6.34-3.el8_10 |
Vulnerabilities 1
-
High 7.5
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_str…