CVE-2026-58936: In png_set_tRNS of pngset.c, there is a possible memory
In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- EPSS 0.3% (23.5% percentile)
- CVSS 9.8 critical