CVE-2026-34757

A flaw was found in libpng, a library used for handling PNG (Portable Network Graphics) image files. This vulnerability arises when an application reuses a pointer, previously obtained from functions like png_get_PLTE, by passing it back to a corresponding setter function within the same image structure. This action causes the setter to access memory that has already been deallocated, leading to a use-after-free condition. A local attacker could potentially exploit this flaw to corrupt image metadata or disclose sensitive information from the application's memory.

There's a use-after-free vulnerability in libpng. The flaw occurs when an application reuses a pointer from png_get_PLTE, png_get_tRNS, or png_get_hIST and passes it to a corresponding setter, leading to memory corruption or information disclosure. A local attacker could exploit this if a vulnerable application processes PNG files in this specific manner. Red Hat Product Security team has rated this as having a moderate impact as the user needs to be tricked to open the maliciously crafted PNG image, additionally the attacker doesn't have full control if the content it's exfiltrating or corruption in the memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.