CVE-2026-58936EPSS p6.7%

CVE-2026-58936CVE-2026-58936

Description

In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Scoring

EPSS0.17% probability of exploitation · percentile 6.7% · 2026-11-03T12:00:27Z
Last modified2026-11-03
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.