platform/external/libpng vulnerabilities (Android)

5 vulnerabilities.

• platform/external/libpng Android In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This... CVE-2026-58936 Fix available 9.8 CriticalNovember 1, 2026
• platform/external/libpng Android LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 CVE-2026-33636 Fix available 7.6 HighMarch 26, 2026
• platform/external/libpng Android LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` CVE-2025-65018 Public exploitFix available 7.1 HighNovember 24, 2025
• platform/external/libpng Android LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication CVE-2025-64720 Public exploitFix available 7.1 HighNovember 24, 2025
• platform/external/libpng Android LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index CVE-2025-64505 Fix available 6.1 MediumNovember 24, 2025