Posted by Cosmin Truta on Sep 28 Hello, everyone, libpng 1.6.59 has been released, fixing a medium-severity use-after-free vulnerability in the sequential reader, present since libpng 1.6.0. It affects applications that call png_read_end without first starting to read the image rows. Users should either upgrade to libpng 1.6.59 or apply the fix described below. === CVE-2026-46675 === Use-after-free of zlib input in png_read_end after incomplete zTXt, iTXt or iCCP...
libpng 1.6.59: Use-after-free vulnerability fixed: CVE-2026-46675
About this summary. This is a short, independently written summary of an article first published by oss-security. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q3/977
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
GitHub’s AI agent found 24 Android app vulnerabilities
GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to…
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950.
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the…
Cybersecurity jobs available right now: September 29, 2026
Application Security Researcher Novee Security | Israel | Hybrid – View job details As an Application Security Researcher, you will test web applications and APIs to…
Residual Transferability in Neural Image Watermarking
arXiv:2609.32241v1 Announce Type: new Abstract: Neural image watermarks can be forged by extracting watermark-bearing residuals from released images and transferring…
VulContextBench: A Benchmark for Security Context Retrieval in Coding Agents
arXiv:2609.32601v1 Announce Type: new Abstract: Vulnerability-detection benchmarks score the verdict an agent reaches, not the evidence it gathered. A model that recalls…