Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9 libpng Critical Heap Buffer Overflow Vuln CVE-2026-25646

mageia
Calendar Grey February 12, 2026
Dist Mageia Esm H88
Updated Mageia libpng packages address a critical heap buffer overflow vulnerability. Stay secure by updating.
MGASA-2026-0038 - Updated libpng packages fix security vulnerability

Summary

Description: Heap buffer overflow in png_set_quantize when called with no histogram and a palette larger than twice the requested maximum number of colors. (CVE-2026-25646)

References

- https://bugs.mageia.org/show_bug.cgi?id=35115

- https://www.openwall.com/lists/oss-security/2026/02/09/7

- https://www.cve.org/CVERecord?id=CVE-2026-25646

Topics%20covered

Topics Covered

security advisory critical libpng CVE heap buffer overflow Mageia

Resolution

SRPMS

- 9/core/libpng-1.6.38-1.4.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Feb 2026
URL: https://advisories.mageia.org/MGASA-2026-0038.html
Type: security
CVE: CVE-2026-25646

Topics%20covered

Topics Covered

security advisory critical libpng CVE heap buffer overflow Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here