CVE-2026-22695

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.51 through 1.6.53

Description libpng is a library used by applications to read, create, and manipulate PNG image files. A heap buffer over-read exists in the png image finish read function when processing interlaced 16-bit PNGs with an 8-bit output format and a non-minimal row stride. This issue is a regression introduced by a fix for a previous issue.

Recommendations Update to version 1.6.54 or later.