LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function pngimagefinish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.
{
"license": "CC-BY-4.0",
"sources": [
{
"published": "2026-01-12T23:15:52.597Z",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-22695",
"modified": "2026-01-21T18:58:55.787Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22695",
"id": "CVE-2026-22695",
"imported": "2026-03-24T05:02:26.972Z"
}
]
}