Skip to content
OpenAdvisories
High VDE-2026-053 2 CVEs

METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities

Published May 26, 2026 · Updated May 26, 2026

Vendor: METTLER TOLEDO Product: EVA C1 Coulometric Karl Fischer Titrator Product: EVA C3 Coulometric Karl Fischer Titrator Product: EVA V1 Volumetric Karl Fischer Titrator Product: EVA V3 Volumetric Karl Fischer Titrator Product: Titration Software

Summary

Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.

Details

Impact
When an EVA Karl Fischer titrator connects to a LabX server for authentication, a crafted PNG image processed during this flow could trigger the vulnerability in the underlying libpng library, potentially causing a denial of service, information disclosure, heap corruption, or code execution.

Remediation
Update to Titration software version 2.0.2.6, which includes fixes for CVE-2026-33416 and CVE-2026-33636.

Vulnerabilities 2

  • High 7.6
    CVE-2026-33636

    LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palett…

    pnggroup libpng fltk libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-33416

    LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_str…

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1.0.0

    Initial revision

References