{"schema_version":"1.9.0","id":"CVE-2026-33416","published":"2026-03-26T16:48:54.174Z","modified":"2026-09-05T14:06:29.443519Z","aliases":["GHSA-m4pc-p4q3-4c7j"],"related":["ALSA-2026:18028","ALSA-2026:18064","ALSA-2026:26347","ALSA-2026:26348","ALSA-2026:28233","ALSA-2026:28244","ALSA-2026:28255","ALSA-2026:29898","ALSA-2026:7671","ALSA-2026:7672","ALSA-2026:8052","ALSA-2026:8459","ALSA-2026:9345","ALSA-2026:9638","ALSA-2026:9693","CGA-8w4h-fp96-qpj3","SUSE-SU-2026:1311-1","SUSE-SU-2026:1323-1","SUSE-SU-2026:1368-1","SUSE-SU-2026:1500-1","SUSE-SU-2026:1702-1","SUSE-SU-2026:1716-1","SUSE-SU-2026:21000-1","SUSE-SU-2026:21038-1","SUSE-SU-2026:21067-1","SUSE-SU-2026:21138-1","SUSE-SU-2026:23063-1","openSUSE-SU-2026:10451-1","openSUSE-SU-2026:10640-1","openSUSE-SU-2026:20466-1"],"summary":"LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`","details":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pnggroup/libpng","events":[{"introduced":"f50c91b7bd6d7c539bd8820c8ab2e37a86108a44"},{"fixed":"07c0685a5db02bbf2ad275c3fdb18c69988168be"},{"fixed":"23019269764e35ed8458e517f1897bd3c54820eb"},{"fixed":"7ea9eea884a2328cc7fdcb3c0c00246a50d90667"},{"fixed":"a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25"},{"fixed":"c1b0318b393c90679e6fa5bc1d329fd5d5012ec1"}],"database_specific":{"cpe":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.2.1"},{"fixed":"1.6.56"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.6.55","v1.6.54","v1.6.53","v1.6.52","v1.6.51","v1.6.50","v1.6.49","v1.6.48","v1.6.47","v1.6.46","v1.6.45","v1.6.44","v1.6.43","v1.6.42","v1.6.41","v1.6.40","v1.6.39","v1.6.38","v1.6.37","v1.6.36","v1.6.35","v1.6.35beta01","v1.6.34","v1.6.33","v1.6.33rc02","v1.6.33rc01","v1.6.33beta03","v1.6.33beta02","v1.6.33beta01","v1.6.32","v1.6.32rc02","v1.6.32rc01","v1.6.32beta11","v1.6.32beta10","v1.6.32beta09","v1.6.32beta08","v1.6.32beta07","v1.6.32beta06","v1.6.32beta05","v1.6.32beta03","v1.6.32beta02","v1.6.32beta01","v1.6.31","libpng-1.6.31-signed","libpng-1.6.31-master-signed","v1.6.31rc02","v1.6.31rc01","v1.6.31beta07","v1.6.31beta06","v1.6.31beta05","v1.6.31beta04","v1.6.31beta03","v1.6.31beta02","v1.6.31beta01","v1.6.30","libpng-1.6.30-signed","libpng-1.6.30-master-signed","v1.6.30rc01","v1.6.30beta04","v1.6.30beta03","v1.6.30beta02","v1.6.30beta01","v1.6.29","libpng-1.6.29-signed","v1.6.29rc01","v1.6.29beta03","v1.6.29beta02","v1.6.27beta01","v1.6.26","libpng-1.6.26-signed","v1.6.26rc01","v1.6.26beta06","v1.6.26beta05","v1.6.26beta04","v1.6.26beta03","v1.6.26beta02","v1.6.26beta01","v1.6.25","libpng-1.6.25-signed","v1.6.25rc04","v1.6.25beta02","v1.6.24","libpng-1.6.24-signed","v1.6.24rc03","v1.6.24rc02","v1.6.24rc01","v1.6.24beta06","v1.6.24beta05","v1.6.24beta04","v1.6.24beta03","v1.6.24beta02","v1.6.23","libpng-1.6.23-signed","v1.6.23rc02","v1.6.23rc01","v1.6.23beta01","v1.6.22","v1.6.22rc03","v1.6.22rc02","v1.6.22rc01","v1.6.22beta06","v1.6.22beta05","v1.6.22beta02","v1.6.22beta01","v1.6.21","libpng-1.6.21-signed","v1.6.21rc02","v1.6.21rc01","v1.6.21beta03","v1.6.21beta02","v1.6.21beta01","libpng-1.6.20-signed","v1.6.20rc02","v1.6.20rc01","v1.6.20beta03","v1.6.20beta02","v1.6.20beta01","v1.6.19","v1.6.19rc04","v1.6.19rc03","v1.6.19rc02","v1.6.19rc01","v1.6.19beta04","v1.6.19beta03","v1.6.19beta02","v1.6.19beta01","v1.6.18","libpng-1.6.18-signed","v1.6.18rc03","v1.6.18rc02","v1.6.18rc01","v1.6.18beta09","v1.6.18beta08","v1.6.18beta07","v1.6.18beta06","v1.6.18beta05","v1.6.18beta04","v1.6.18beta03","v1.6.18beta02","v1.6.18beta01","v1.6.17","libpng-1.6.17-signed","v1.6.17rc06","v1.6.17rc05","v1.6.17rc04","v1.6.17rc03","v1.6.17rc02","v1.6.17rc01","v1.6.17beta05","v1.6.17beta04","v1.6.17beta03","v1.6.17beta02","v1.6.17beta01","v1.6.16","libpng-1.6.16-signed","v1.6.16rc03","v1.6.16rc02","v1.6.16rc01","v1.6.16beta03","v1.6.16beta02","v1.6.16beta01","v1.6.15","libpng-1.6.15-signed","v1.6.15rc03","v1.6.15rc02","v1.6.15rc01","v1.6.15beta08","v1.6.15beta07","v1.6.15beta06","v1.6.15beta05","v1.6.15beta04","v1.6.15beta03","v1.6.15beta02","v1.6.15beta01","v1.6.14","libpng-1.6.14-signed","v1.6.14rc02","v1.6.14rc01","v1.6.14beta07","v1.6.14beta06","v1.6.14beta05","v1.6.14beta04","v1.6.14beta03","v1.6.14beta02","v1.6.14beta01","v1.6.13","libpng-1.6.13-signed","v1.6.13rc01","v1.6.13beta04","v1.6.13beta03","v1.6.13beta02","v1.6.13beta01","v1.6.12","libpng-1.6.12-signed","v1.6.12rc03","v1.6.12rc02","v1.6.12rc01","v1.6.11","libpng-1.6.11-signed","v1.6.11rc02","v1.6.11rc01","v1.6.11beta06","v1.6.11beta05","v1.6.11beta04","v1.6.11beta03","v1.6.11beta02","v1.6.11beta01","v1.6.10","libpng-1.6.10-signed","v1.6.10rc03","v1.6.10rc02","v1.6.10rc01","v1.6.10beta02","v1.6.10beta01","v1.6.9","libpng-1.6.9-signed","v1.6.9rc02","v1.6.9rc01","v1.6.9beta03","v1.6.9beta02","v1.6.9beta01","v1.6.8","libpng-1.6.8-signed","v1.6.8rc02","v1.6.8beta02","v1.6.8beta01","v1.6.7","libpng-1.6.7-signed","v1.6.7rc02","v1.6.7rc01","v1.6.7beta04","v1.6.7beta03","v1.6.7beta02","v1.6.7beta01","v1.6.6","v1.6.5","v1.6.4","libpng-1.6.4-signed","v1.6.4rc01","v1.6.4beta02","v1.6.3","libpng-1.6.3-signed","v1.6.3rc01","v1.6.3beta10","v1.6.3beta09","v1.6.3beta08","v1.6.3beta07","v1.6.3beta06","v1.6.3beta05","v1.6.3beta04","v1.6.3beta03","v1.6.3beta02","v1.6.3beta01","v1.6.2","libpng-1.6.2-signed","v1.6.2rc06","v1.6.2rc05","v1.6.2rc04","v1.6.2rc03","v1.6.2rc02","v1.6.2rc01","v1.6.2beta02","v1.6.2beta01","v1.6.1","v1.6.1rc01","v1.6.1beta09","v1.6.1beta08","v1.6.1beta07","v1.6.1beta06","v1.6.1beta05","v1.6.1beta04","v1.6.1beta03","v1.6.1beta02","v1.6.1beta01","v1.6.0","v1.6.0rc08","v1.6.0rc07","v1.6.0rc06","v1.6.0rc05","v1.6.0rc04","v1.6.0rc03","v1.6.0rc02","v1.6.0rc01","v1.6.0beta40","v1.6.0beta39","v1.6.0beta38","v1.6.0beta37","v1.6.0beta36","v1.6.0beta35","v1.6.0beta34","v1.6.0beta33","v1.6.0beta32","v1.6.0beta31","v1.6.0beta30","v1.6.0beta29","v1.6.0beta28","v1.6.0beta27","v1.6.0beta26","v1.6.0beta25","v1.6.0beta24","v1.6.0beta23","v1.6.0beta22","v1.6.0beta21","v1.6.0beta19","v1.6.0beta18","v1.6.0beta17","v1.6.0beta16","v1.6.0beta15","v1.6.0beta14","v1.6.0beta13","v1.6.0beta12","v1.6.0beta11","v1.6.0beta10","v1.6.0beta09","v1.6.0beta08","v1.6.0beta07","v1.6.0beta06","v1.6.0beta05","v1.6.0beta04","v1.6.0beta03","v1.6.0beta02","v1.6.0beta01","v1.5.7beta04","v1.5.7beta03","v1.5.7beta02","v1.5.7beta01","v1.5.6","v1.5.6rc03","v1.5.6rc02","v1.5.6rc01","v1.5.6beta07","v1.5.6beta06","v1.5.6beta05","v1.5.6beta04","v1.5.6beta03","v1.5.6beta02","v1.5.6beta01","v1.5.5","v1.5.5rc01","v1.5.5beta08","v1.5.5beta07","v1.5.5beta06","v1.5.5beta05","v1.5.5beta04","v1.5.5beta03","v1.5.5beta02","v1.5.5beta01","v1.5.4","v1.5.4rc01","v1.5.4beta08","v1.5.4beta07","v1.5.4beta06","v1.5.4beta05","v1.5.4beta04","v1.5.4beta03","v1.5.4beta02","v1.5.4beta01","v1.5.3beta11","v1.5.3rc02","v1.5.3rc01","v1.5.3beta10","v1.5.3beta09","v1.5.3beta08","v1.5.3beta07","v1.5.3beta06","v1.5.3beta05","v1.5.3beta03","v1.5.3beta02","v1.5.3beta01","v1.5.2","v1.5.2rc03","v1.5.2rc02","v1.5.2rc01","v1.5.2beta03","v1.5.2beta02","v1.5.2beta01","v1.5.1","v1.5.1rc02","v1.5.1rc01","v1.5.1beta11","v1.5.1beta10","v1.5.1beta09","v1.5.1beta08","v1.5.1beta07","v1.5.1beta06","v1.5.1beta05","v1.5.1beta04","v1.5.1beta03","v1.5.1beta02","v1.5.1beta01","v1.5.0","v1.5.0rc06","v1.5.0rc05","v1.5.0rc03","v1.5.0rc02","v1.5.0rc01","v1.5.0beta58","v1.5.0beta57","v1.5.0beta56","v1.5.0beta55","v1.5.0beta54","v1.5.0beta53","v1.5.0beta52","v1.5.0beta51","v1.5.0beta50","v1.5.0beta49","v1.5.0beta48","v1.5.0beta47","v1.5.0beta46","v1.5.0beta45","v1.5.0beta44","v1.5.0beta43","v1.5.0beta42","v1.5.0beta41","v1.5.0beta40","v1.5.0beta39","v1.5.0beta38","v1.5.0beta37","v1.5.0beta36","v1.5.0beta35","v1.5.0beta34","v1.5.0beta33","v1.5.0beta32","v1.5.0beta31","v1.5.0beta30","v1.5.0beta29","v1.5.0beta28","v1.5.0beta27","v1.5.0beta26","v1.5.0beta25","v1.5.0beta24","v1.5.0beta23","v1.5.0beta22","v1.5.0beta21","v1.5.0beta20","v1.5.0beta19","v1.5.0beta18","v1.5.0beta17","v1.5.0beta16","v1.5.0beta15","v1.5.0beta14","v1.5.0beta13","v1.5.0beta12","v1.5.0beta11","v1.5.0beta09","v1.5.0beta08","v1.5.0beta07","v1.5.0beta06","v1.5.0beta05","v1.5.0beta04","v1.5.0beta03","v1.5.0beta02","v1.5.0beta01","v1.4.0rc08","v1.4.0rc07","v1.4.0rc06","v1.4.0rc05","v1.4.0rc04","v1.4.0rc03","v1.4.0beta109","v1.4.0beta108","v1.4.0beta107","v1.4.0beta106","v1.4.0beta105","v1.4.0beta104","v1.4.0beta102","v1.4.0beta101","v1.4.0beta100","v1.4.0beta99","v1.4.0beta98","v1.4.0beta96","v1.4.0beta95","v1.4.0beta94","v1.4.0beta93","v1.4.0beta92","v1.4.0beta91","v1.4.0beta90","v1.4.0beta89","v1.4.0beta87","v1.4.0beta86","v1.4.0beta85","v1.4.0beta84","v1.4.0beta83","v1.4.0beta82","v1.4.0beta81","v1.4.0beta80","v1.4.0beta79","v1.4.0beta78","v1.4.0beta77","v1.4.0beta76","v1.4.0beta75","v1.4.0beta73","v1.4.0beta71","v1.4.0beta70","v1.4.0beta69","v1.4.0beta68","v1.4.0beta67","v1.4.0beta66","v1.4.0beta65","v1.4.0beta64","v1.4.0beta63","v1.4.0beta62","v1.4.0beta61","v1.4.0beta60","v1.4.0beta58","v1.4.0beta57","v1.4.0beta56","v1.4.0beta55","v1.4.0beta54","v1.4.0beta53","v1.2.10rc1","v1.4.0beta52","v1.4.0beta51","v1.4.0beta50","v1.4.0beta49","v1.4.0beta48","v1.4.0beta47","v1.4.0beta46","v1.4.0beta45","v1.4.0beta44","v1.4.0beta43","v1.4.0beta42","v1.4.0beta41","v1.4.0beta40","v1.4.0beta39","v1.4.0beta38","v1.4.0beta37","v1.4.0beta36","v1.4.0beta35","v1.4.0beta34","v1.4.0beta33","v1.4.0beta32","v1.4.0beta31","v1.4.0beta30","v1.4.0beta29","v1.4.0beta28","v1.4.0beta27","v1.4.0beta26","v1.4.0beta25","v1.4.0beta24","v1.4.0beta23","v1.4.0beta22","v1.4.0beta21","v1.4.0beta20","v1.4.0beta19","v1.4.0beta18","v1.4.0beta17","v1.4.0beta16","v1.4.0beta15","v1.4.0beta14","v1.4.0beta13","v1.4.0beta12","v1.4.0beta11","v1.4.0beta10","v1.4.0beta9","v1.4.0beta8","v1.4.0beta7","v1.4.0beta6","v1.4.0beta5","v1.4.0beta4","v1.4.0beta3","v1.4.0beta2","v1.4.0beta1","v1.2.10beta7","v1.2.10beta6","v1.2.10beta5","v1.2.10beta4","v1.2.10beta3","v1.2.10beta2","v1.2.10beta1","v1.2.9","v1.2.9rc1","v1.2.9beta11","v1.2.9beta10","v1.2.9beta9","v1.2.9beta8","v1.2.9beta7","v1.2.9beta6","v1.2.9beta5","v1.2.9beta4","v1.2.9beta3","v1.2.9beta2","v1.2.9beta1","v1.2.8","v1.2.8rc5","v1.2.8rc4","v1.2.8rc3","v1.2.8rc2","v1.2.8rc1","v1.2.8beta5","v1.2.8beta4","v1.2.8beta3","v1.2.8beta2","v1.2.8beta1","v1.2.7","v1.2.7rc1","v1.2.7beta2","v1.2.7beta1","v1.2.6","v1.2.6rc5","v1.2.6rc4","v1.2.6rc3","v1.2.6rc2","v1.2.6rc1","v1.2.6beta4","v1.2.6beta3","v1.2.6beta2","v1.2.6beta1","v1.2.5","v1.2.5rc3","v1.2.5rc2","v1.2.5rc1","v1.2.5beta2","v1.2.5beta1","v1.2.4","v1.2.4rc1","v1.2.4beta3","v1.2.4beta2","v1.2.4beta1","v1.2.3","v1.2.3rc6","v1.2.3rc5","v1.2.3rc4","v1.2.3rc3","v1.2.3rc2","v1.2.3rc1","v1.2.2","v1.2.2rc1","v1.2.2beta6","v1.2.2beta5","v1.2.2beta4","v1.2.2beta3","v1.2.2beta2","v1.2.2beta1","v1.2.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33416.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["195793623419483107751349550499422338653","241481619897360395005270248340996576576","333957916052778635910280086895133772621","73182602440664933896353205027083131409","119279519610455638020139458056230155289","215279933436747534013670962459111392399"],"threshold":0.9},"id":"CVE-2026-33416-071567c4","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/07c0685a5db02bbf2ad275c3fdb18c69988168be","target":{"file":"png.c"}},{"deprecated":false,"digest":{"function_hash":"110572468687495742200864067113934234520","length":6241},"id":"CVE-2026-33416-194a5630","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngrtran.c","function":"png_set_quantize"}},{"deprecated":false,"digest":{"line_hashes":["78664929825541045347943804030659098153","275886753624758850400559950953109869061","278154899009160441335130137202641445200"],"threshold":0.9},"id":"CVE-2026-33416-2d180195","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngwrite.c"}},{"deprecated":false,"digest":{"function_hash":"304635397398783513978631995226858131043","length":1390},"id":"CVE-2026-33416-3ec3b8a2","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25","target":{"file":"pngset.c","function":"png_set_tRNS"}},{"deprecated":false,"digest":{"function_hash":"236483884268181938566890713142960837813","length":656},"id":"CVE-2026-33416-3f5e0ea0","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngwrite.c","function":"png_write_destroy"}},{"deprecated":false,"digest":{"function_hash":"95039209216747699324711564486998941776","length":1578},"id":"CVE-2026-33416-40c48615","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngread.c","function":"png_read_destroy"}},{"deprecated":false,"digest":{"function_hash":"173692133047662245734139657595136211741","length":1171},"id":"CVE-2026-33416-44e93205","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngset.c","function":"png_set_tRNS"}},{"deprecated":false,"digest":{"line_hashes":["295188705198664353711129016364915234481","61186881870620331963563260190091368059","85813034465098086945703998494715198010","36639532824671943475506617781821801755"],"threshold":0.9},"id":"CVE-2026-33416-467fa3b8","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngrtran.c"}},{"deprecated":false,"digest":{"line_hashes":["277710390577621166110153611286032748480","37812626001429359030407727102204306192","235108146190051955392336492964133331294","308819439959077714989618121299124277555","260397287775790088579463485285595959002"],"threshold":0.9},"id":"CVE-2026-33416-486b0cf5","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/07c0685a5db02bbf2ad275c3fdb18c69988168be","target":{"file":"pngtest.c"}},{"deprecated":false,"digest":{"line_hashes":["98250150014725793241419848892413636482","178195276882115633313296615493177798347","25821686872119194689388687505844949308","227026791080689077429011535169474272442","330282194084099661137173723318868244171","107706244600529939118018940606878508341","178700209567818827418407780831917929359","287471555282919382848424250461084643241","209745718595423869275787055612001785623","2193192155644361006466675754143514414","141909920218320054918118988767399339265","26768757656783073233094152591480478634","40812701347163550374053105626947511165"],"threshold":0.9},"id":"CVE-2026-33416-4f17f3a6","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngset.c"}},{"deprecated":false,"digest":{"line_hashes":["3440380680870728141840740884913181935","194675352698992964869628188225393571793","286290118669996794184809476503204994858"],"threshold":0.9},"id":"CVE-2026-33416-63395d81","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1","target":{"file":"pngrtran.c"}},{"deprecated":false,"digest":{"function_hash":"311015491646152627470899922889670583497","length":771},"id":"CVE-2026-33416-84fd9f6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngwrite.c","function":"png_write_destroy"}},{"deprecated":false,"digest":{"line_hashes":["227026791080689077429011535169474272442","330282194084099661137173723318868244171","107706244600529939118018940606878508341","178700209567818827418407780831917929359","287471555282919382848424250461084643241","25059713478850395472297232412415619623","158404001942170724082453012292215288017","273120231683896222383495422854080657245","264161995622523342792879822668003940787"],"threshold":0.9},"id":"CVE-2026-33416-95f4ede9","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25","target":{"file":"pngset.c"}},{"deprecated":false,"digest":{"line_hashes":["117014855185263494942688330135686104575","325752230950023682901889462812000934508","54327872665649901308013752597204569586","162546633693826527505656352290049025683","276425541579252735905723904052126907315","60710387181426351393555820526981427402","206950420709034598758692366423367440074","245759719882350592384312250931872612852","162728383063999463456796575335251655957"],"threshold":0.9},"id":"CVE-2026-33416-964873fe","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngread.c"}},{"deprecated":false,"digest":{"function_hash":"261304792064467024282742116954189039042","length":4192},"id":"CVE-2026-33416-9ad38780","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1","target":{"file":"pngrtran.c","function":"png_read_transform_info"}},{"deprecated":false,"digest":{"line_hashes":["132271531588699432055803361145099610809","65959435425179038609954885545663919930","309074223655768629569164703220595436025","322267439836006670487936700399879236401","12150830541721880045790454698624805187","317024228464654619763612828428494868402","191979943930225737051145180056805495095","169730874509956863687399430614975043623","211794578928073518449791588814755226723"],"threshold":0.9},"id":"CVE-2026-33416-a202cb2c","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngread.c"}},{"deprecated":false,"digest":{"line_hashes":["166375070723291529406421301066248769034","275647010778297936193963675511576832388","256826767335212246520616614652191899280","279336807821086835335477021495116274772","53629475448747437379627006107537775352","46568612355367798241902050586166833318","245452045998668159989023841863587304868","114709392716353867339954008479701831121"],"threshold":0.9},"id":"CVE-2026-33416-a60364e4","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/07c0685a5db02bbf2ad275c3fdb18c69988168be","target":{"file":"png.h"}},{"deprecated":false,"digest":{"function_hash":"6181938991129466879817268636515152608","length":1692},"id":"CVE-2026-33416-bf3d1d12","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","target":{"file":"pngread.c","function":"png_read_destroy"}},{"deprecated":false,"digest":{"function_hash":"241740084829777515414352894687164664979","length":481},"id":"CVE-2026-33416-c5032f6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/07c0685a5db02bbf2ad275c3fdb18c69988168be","target":{"file":"png.c","function":"png_get_copyright"}},{"deprecated":false,"digest":{"line_hashes":["43864688537629825574037726808235944326","170818353614958581891937302016861126841","278154899009160441335130137202641445200"],"threshold":0.9},"id":"CVE-2026-33416-fea896b3","signature_type":"Line","signature_version":"v1","source":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","target":{"file":"pngwrite.c"}}],"vanir_signatures_modified":"2026-09-05T14:06:29Z"}}],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33416.json"},{"type":"ADVISORY","url":"https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416"},{"type":"FIX","url":"https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb"},{"type":"FIX","url":"https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667"},{"type":"FIX","url":"https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25"},{"type":"FIX","url":"https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1"},{"type":"FIX","url":"https://github.com/pnggroup/libpng/pull/824"}],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-416"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33416.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}