CVE-2026-33636 is another reminder that image decoding remains one of the most attack-prone corners of the software stack, especially where hand-tuned SIMD code meets attacker-controlled input. In libpng, the flaw sits in the ARM/AArch64 Neon-optimized palette expansion path, where a final...