CVE-2026-91186 - PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write
CVE ID :CVE-2026-91186 Published : Oct. 20, 2026, 3:17 p.m. | 48 minutes ago Description :The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but nothing prevents an IHDR being read a second...