Posted by Cosmin Truta on Sep 28 Hello, everyone, libpng 1.6.59 has been released, fixing a medium-severity use-after-free vulnerability in the sequential reader, present since libpng 1.6.0. It affects applications that call png_read_end without first starting to read the image rows. Users should either upgrade to libpng 1.6.59 or apply the fix described below. === CVE-2026-46675 === Use-after-free of zlib input in png_read_end after incomplete zTXt, iTXt or iCCP...
libpng 1.6.59: Use-after-free vulnerability fixed: CVE-2026-46675
About this summary. This is a short, independently written summary of an article first published by oss-security. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q3/977
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Cybersecurity jobs available right now: September 29, 2026
Application Security Researcher Novee Security | Israel | Hybrid – View job details As an Application Security Researcher, you will test web applications and APIs to…
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006
Posted by Adrian Perez de Castro on Sep 28 ------------------------------------------------------------------------ WebKitGTK and WPE WebKit Security Advisory…
JIT buffer overflow fixed in libpcre2-10.49
Posted by Sam James on Sep 28 From https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 """ This is a security-only release, to address GHSA-r9hj-j2rw-4q3m…
Moodle LMS 3.9.2: authenticated file-upload validation bypass (CWE-434) leading to RCE under misconfiguration
Posted by Muhammad Arslan Official on Sep 28 Hello, I am disclosing a vulnerability in Moodle LMS and requesting a CVE ID, as the vendor (a registered CNA) has not…
Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings
Citrix took most of the weekend to confirm that attackers were actively exploiting the newest round of NetScaler zero-days, leaving network defenders and threat hunters…
Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th)
Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS…