png decoding

  1. CVE-2026-33636 libpng ARM Neon Bug: Out-of-Bounds Read/Write Fix in 1.6.56

    CVE-2026-33636 is another reminder that image decoding remains one of the most attack-prone corners of the software stack, especially where hand-tuned SIMD code meets attacker-controlled input. In libpng, the flaw sits in the ARM/AArch64 Neon-optimized palette expansion path, where a final...