CVE-2026-58936: In png_set_tRNS of pngset.c, there is a possible memory

In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions