LIBPNG’s maintainers have shipped an urgent patch after researchers discovered a high‑severity out‑of‑bounds read in the simplified read/write API: png_image_read_composite can read up to 1,012 bytes past the end of the png_sRGB_base array when processing valid palette PNGs that include partial...
Windows Imaging Component (WIC), the core framework powering image decoding and editing across numerous Microsoft and third-party applications, faces growing scrutiny after the recent disclosure of CVE-2025-47980 — an information disclosure vulnerability with far-reaching security implications...