{"id":"CVE-2026-22801","summary":"LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*","details":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.","aliases":["GHSA-vgjq-8cw5-ggw8"],"modified":"2026-03-20T09:29:09.929849Z","published":"2026-01-12T22:57:58.288Z","related":["ALSA-2026:3405","ALSA-2026:3551","ALSA-2026:4306","ALSA-2026:4728","CGA-89pm-x3vc-v2jr","MGASA-2026-0010","SUSE-SU-2026:0234-1","SUSE-SU-2026:0596-1","SUSE-SU-2026:20127-1","SUSE-SU-2026:20155-1","SUSE-SU-2026:20523-1","SUSE-SU-2026:20530-1","openSUSE-SU-2026:10060-1","openSUSE-SU-2026:20083-1"],"database_specific":{"cna_assigner":"GitHub_M","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22801.json","cwe_ids":["CWE-125","CWE-190"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22801.json"},{"type":"ADVISORY","url":"https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22801"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/glennrp/libpng","events":[{"introduced":"0c440812db5f3f8929db87ff840bc51fd09a8af3"},{"fixed":"02f2b4f4699f0ef9111a6534f093b53732df4452"}],"database_specific":{"versions":[{"introduced":"1.6.26"},{"fixed":"1.6.54"}]}}],"versions":["libpng-1.6.15-master-signed","libpng-1.6.16-master-signed","libpng-1.6.17-master-signed","libpng-1.6.18-master-signed","libpng-1.6.20-master-signed","libpng-1.6.21-master-signed","libpng-1.6.24-master-signed","libpng-1.6.25-master-signed","libpng-1.6.26-master-signed","libpng-1.6.26-signed","libpng-1.6.28-signed","libpng-1.6.29-master-signed","libpng-1.6.29-signed","libpng-1.6.30-master-signed","libpng-1.6.30-signed","libpng-1.6.31-master-signed","libpng-1.6.31-signed","v1.2.10","v1.2.10rc2","v1.2.10rc3","v1.2.11","v1.2.11beta1","v1.2.11beta2","v1.2.11beta2cos","v1.2.11beta3","v1.2.11beta4","v1.2.11rc1","v1.2.11rc2","v1.2.11rc3","v1.2.11rc5","v1.2.12","v1.2.13","v1.2.13beta1","v1.2.13rc1","v1.2.13rc2","v1.2.14","v1.2.14beta1","v1.2.14beta2","v1.2.14rc1","v1.2.15","v1.2.15beta1","v1.2.15beta2","v1.2.15beta3","v1.2.15beta4","v1.2.15beta5","v1.2.15beta6","v1.2.15rc1","v1.2.15rc2","v1.2.15rc3","v1.2.15rc4","v1.2.15rc5","v1.2.16","v1.2.16beta1","v1.2.16beta2","v1.2.16rc1","v1.2.17","v1.2.17beta1","v1.2.17beta2","v1.2.17rc1","v1.2.17rc2","v1.2.17rc3","v1.2.17rc4","v1.2.18","v1.2.19","v1.2.19beta1","v1.2.19beta10","v1.2.19beta11","v1.2.19beta12","v1.2.19beta13","v1.2.19beta14","v1.2.19beta15","v1.2.19beta16","v1.2.19beta17","v1.2.19beta18","v1.2.19beta19","v1.2.19beta2","v1.2.19beta20","v1.2.19beta21","v1.2.19beta22","v1.2.19beta23","v1.2.19beta24","v1.2.19beta25","v1.2.19beta26","v1.2.19beta27","v1.2.19beta28","v1.2.19beta29","v1.2.19beta3","v1.2.19beta30","v1.2.19beta31","v1.2.19beta4","v1.2.19beta5","v1.2.19beta6","v1.2.19beta7","v1.2.19beta8","v1.2.19beta9","v1.2.19rc1","v1.2.19rc2","v1.2.19rc3","v1.2.19rc4","v1.2.19rc5","v1.2.19rc6","v1.2.20","v1.2.20beta01","v1.2.20beta02","v1.2.20beta03","v1.2.20beta04","v1.2.20rc1","v1.2.20rc2","v1.2.20rc3","v1.2.20rc4","v1.2.20rc5","v1.2.20rc6","v1.2.21","v1.2.21beta1","v1.2.21beta2","v1.2.21rc1","v1.2.21rc2","v1.2.21rc3","v1.2.22","v1.2.22beta1","v1.2.22beta2","v1.2.22beta3","v1.2.22beta4","v1.2.22rc1","v1.2.23","v1.2.23beta01","v1.2.23beta02","v1.2.23beta03","v1.2.23beta04","v1.2.23beta05","v1.2.23rc01","v1.2.24","v1.2.24beta01","v1.2.24beta02","v1.2.24rc01","v1.2.25","v1.2.25beta01","v1.2.25beta02","v1.2.25beta03","v1.2.25beta04","v1.2.25beta05","v1.2.25beta06","v1.2.25rc01","v1.2.25rc02","v1.2.26","v1.2.26beta01","v1.2.26beta02","v1.2.26beta03","v1.2.26beta04","v1.2.26beta05","v1.2.26beta06","v1.2.26rc01","v1.2.27","v1.2.27beta01","v1.2.27beta02","v1.2.27beta03","v1.2.27beta04","v1.2.27beta05","v1.2.27beta06","v1.2.27rc01","v1.2.28","v1.2.29","v1.2.29beta01","v1.2.29beta02","v1.2.29beta03","v1.2.29rc01","v1.2.30","v1.2.30beta01","v1.2.30beta02","v1.2.30beta03","v1.2.30beta04","v1.2.30rc01","v1.2.30rc02","v1.2.30rc03","v1.2.30rc04","v1.2.30rc05","v1.2.30rc06","v1.2.30rc07","v1.2.30rc08","v1.2.31","v1.2.31rc01","v1.2.31rc02","v1.2.31rc03","v1.2.32","v1.2.32beta01","v1.2.32rc01","v1.2.33","v1.2.33beta01","v1.2.33rc01","v1.2.33rc02","v1.2.34","v1.2.34beta01","v1.2.34beta02","v1.2.34beta03","v1.2.34beta04","v1.2.34beta05","v1.2.34beta06","v1.2.34beta07","v1.2.34rc01","v1.2.35","v1.2.35beta01","v1.2.35beta02","v1.2.35beta03","v1.2.35rc01","v1.2.35rc02","v1.2.36","v1.2.36beta01","v1.2.36beta02","v1.2.36beta03","v1.2.36beta04","v1.2.36beta05","v1.2.37","v1.2.37beta01","v1.2.37beta02","v1.2.37beta03","v1.2.37rc01","v1.2.38","v1.2.38beta01","v1.2.38rc01","v1.2.38rc02","v1.2.38rc03","v1.2.39","v1.2.39beta01","v1.2.39beta02","v1.2.39beta03","v1.2.39beta04","v1.2.39beta05","v1.2.39rc01","v1.2.40","v1.2.40beta01","v1.2.40rc01","v1.2.41","v1.2.41beta01","v1.2.41beta02","v1.2.41beta03","v1.2.41beta04","v1.2.41beta05","v1.2.41beta06","v1.2.41beta07","v1.2.41beta08","v1.2.41beta09","v1.2.41beta10","v1.2.41beta11","v1.2.41beta12","v1.2.41beta13","v1.2.41beta14","v1.2.41beta15","v1.2.41beta16","v1.2.41beta17","v1.2.41beta18","v1.2.41beta19","v1.2.41rc01","v1.2.41rc02","v1.2.41rc03","v1.2.42","v1.2.42beta01","v1.2.42beta02","v1.2.42rc01","v1.2.42rc02","v1.2.42rc03","v1.2.42rc04","v1.2.42rc05","v1.4.0","v1.4.1","v1.4.1beta01","v1.4.1beta02","v1.4.1beta03","v1.4.1beta04","v1.4.1beta05","v1.4.1beta06","v1.4.1beta07","v1.4.1beta08","v1.4.1beta09","v1.4.1beta10","v1.4.1beta11","v1.4.1beta12","v1.4.1rc01","v1.4.1rc02","v1.4.1rc03","v1.4.1rc04","v1.4.2","v1.4.2beta01","v1.4.2rc01","v1.4.2rc02","v1.4.2rc03","v1.4.2rc04","v1.4.2rc05","v1.4.2rc06","v1.4.3","v1.4.3beta01","v1.4.3beta02","v1.4.3beta04","v1.4.3beta05","v1.4.3rc01","v1.4.3rc02","v1.4.3rc03","v1.4.4","v1.4.4beta01","v1.4.4beta02","v1.4.4beta03","v1.4.4beta05","v1.4.4beta06","v1.4.4beta07","v1.4.4beta08","v1.4.4rc01","v1.4.4rc02","v1.4.4rc03","v1.4.4rc04","v1.4.4rc05","v1.4.5","v1.4.5beta01","v1.4.5beta02","v1.4.5beta03","v1.4.5beta04","v1.4.5beta06","v1.4.5rc01","v1.4.5rc02","v1.4.5rc03","v1.4.6","v1.4.6beta01","v1.4.6beta03","v1.4.6beta04","v1.4.6beta06","v1.4.6beta07","v1.4.6rc01","v1.4.6rc02","v1.4.7","v1.4.7rc01","v1.4.8","v1.4.8beta01","v1.4.8beta02","v1.4.8beta03","v1.4.8beta04","v1.4.8beta05","v1.4.8rc01","v1.5.7","v1.5.7beta05","v1.5.7rc01","v1.5.7rc02","v1.5.7rc03","v1.5.8beta01","v1.5.8rc02","v1.5.9","v1.5.9beta01","v1.5.9rc01","v1.6.17-master","v1.6.18-master","v1.6.26","v1.6.27","v1.6.27beta01","v1.6.27rc01","v1.6.28","v1.6.28rc01","v1.6.28rc02","v1.6.28rc03","v1.6.29","v1.6.29beta01","v1.6.29beta02","v1.6.29beta03","v1.6.29rc01","v1.6.30","v1.6.30beta01","v1.6.30beta02","v1.6.30beta03","v1.6.30beta04","v1.6.30rc01","v1.6.31","v1.6.31beta01","v1.6.31beta02","v1.6.31beta03","v1.6.31beta04","v1.6.31beta05","v1.6.31beta06","v1.6.31beta07","v1.6.31rc01","v1.6.31rc02","v1.6.32","v1.6.32beta01","v1.6.32beta02","v1.6.32beta03","v1.6.32beta05","v1.6.32beta06","v1.6.32beta07","v1.6.32beta08","v1.6.32beta09","v1.6.32beta10","v1.6.32beta11","v1.6.32rc01","v1.6.32rc02","v1.6.33","v1.6.33beta01","v1.6.33beta02","v1.6.33beta03","v1.6.33rc01","v1.6.33rc02","v1.6.34","v1.6.35","v1.6.35beta01","v1.6.36","v1.6.37","v1.6.38","v1.6.39","v1.6.40","v1.6.41","v1.6.42","v1.6.43","v1.6.44","v1.6.45","v1.6.46","v1.6.47","v1.6.48","v1.6.49","v1.6.50","v1.6.51","v1.6.52","v1.6.53"],"database_specific":{"vanir_signatures":[{"signature_type":"Function","deprecated":false,"id":"CVE-2026-22801-7949f212","target":{"file":"png.c","function":"png_get_copyright"},"source":"https://github.com/glennrp/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"function_hash":"154053324026357579622821123918096375308","length":481}},{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-af4b95a7","target":{"file":"png.c"},"source":"https://github.com/glennrp/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["327333362595809855009709216293242458091","279773453140246214690474345717570130546","115820707951216701988175577087939699096","311171675743028020374147954611376107950","167668607726485798520722745583647935882","334738595734899256725134661017463305676"]}},{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-c0ab282a","target":{"file":"png.h"},"source":"https://github.com/glennrp/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["166375070723291529406421301066248769034","275647010778297936193963675511576832388","256826767335212246520616614652191899280","279336807821086835335477021495116274772","21410732896831932727182998172814220178","106550426482539417114549859700126206902","247197528077876204962072745179511874496","327509478853766906744281300346084898016"]}},{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-fa36825b","target":{"file":"pngtest.c"},"source":"https://github.com/glennrp/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["61817495566730883906655567599472824457","275257476952071577898258900499903171964","91397839701035180686538087820368727519","158625912433874676602721644606842363619"]}}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-22801.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/pnggroup/libpng","events":[{"introduced":"0"},{"fixed":"02f2b4f4699f0ef9111a6534f093b53732df4452"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"1.6.54"}]}}],"versions":["libpng-1.6.10-signed","libpng-1.6.11-signed","libpng-1.6.12-signed","libpng-1.6.13-signed","libpng-1.6.14-signed","libpng-1.6.15-master-signed","libpng-1.6.15-signed","libpng-1.6.16-master-signed","libpng-1.6.16-signed","libpng-1.6.17-master-signed","libpng-1.6.17-signed","libpng-1.6.18-master-signed","libpng-1.6.18-signed","libpng-1.6.2-signed","libpng-1.6.20-master-signed","libpng-1.6.20-signed","libpng-1.6.21-master-signed","libpng-1.6.21-signed","libpng-1.6.23-signed","libpng-1.6.24-master-signed","libpng-1.6.24-signed","libpng-1.6.25-master-signed","libpng-1.6.25-signed","libpng-1.6.26-master-signed","libpng-1.6.26-signed","libpng-1.6.28-signed","libpng-1.6.29-master-signed","libpng-1.6.29-signed","libpng-1.6.3-signed","libpng-1.6.30-master-signed","libpng-1.6.30-signed","libpng-1.6.31-master-signed","libpng-1.6.31-signed","libpng-1.6.4-signed","libpng-1.6.7-signed","libpng-1.6.8-signed","libpng-1.6.9-signed","v0.71","v0.81","v0.82","v0.85","v0.86","v0.87","v0.88","v0.89","v0.89c","v0.90","v0.96","v0.97","v0.97a","v0.97c","v0.98","v0.99","v0.99a","v0.99c","v0.99d","v0.99e","v0.99i","v0.99j","v0.99k","v0.99m","v0.99n","v0.99p","v1.0.0","v1.0.0a","v1.0.0b","v1.0.1","v1.0.10","v1.0.10beta1","v1.0.10rc1","v1.0.11","v1.0.11beta1","v1.0.11beta2","v1.0.11beta3","v1.0.11rc1","v1.0.12beta1","v1.0.1a","v1.0.1b","v1.0.1c","v1.0.1d","v1.0.1e","v1.0.2","v1.0.2a","v1.0.2b","v1.0.3","v1.0.4","v1.0.4-pre1","v1.0.4-pre2","v1.0.4-pre3","v1.0.4c","v1.0.4d","v1.0.4d2","v1.0.4e","v1.0.4f","v1.0.5","v1.0.5-pre1","v1.0.5a","v1.0.5c","v1.0.5d","v1.0.5h","v1.0.5q","v1.0.5s","v1.0.6","v1.0.6a","v1.0.6d","v1.0.6e","v1.0.6f","v1.0.6g","v1.0.6h","v1.0.6i","v1.0.6j","v1.0.7","v1.0.7beta11","v1.0.7beta12","v1.0.7beta13","v1.0.7beta14","v1.0.7beta15","v1.0.7beta16","v1.0.7beta17","v1.0.7beta18","v1.0.7rc1","v1.0.7rc2","v1.0.8","v1.0.8beta1","v1.0.8beta2","v1.0.8beta3","v1.0.8beta4","v1.0.8rc1","v1.0.9","v1.0.9beta1","v1.0.9beta10","v1.0.9beta2","v1.0.9beta3","v1.0.9beta4","v1.0.9beta5","v1.0.9beta6","v1.0.9beta7","v1.0.9beta8","v1.0.9beta9","v1.0.9rc1","v1.0.9rc2","v1.00","v1.2.0","v1.2.0beta1","v1.2.0beta2","v1.2.0beta3","v1.2.0beta4","v1.2.0beta5","v1.2.0rc1","v1.2.1","v1.2.10","v1.2.10beta1","v1.2.10beta2","v1.2.10beta3","v1.2.10beta4","v1.2.10beta5","v1.2.10beta6","v1.2.10beta7","v1.2.10rc1","v1.2.10rc2","v1.2.10rc3","v1.2.11","v1.2.11beta1","v1.2.11beta2","v1.2.11beta2cos","v1.2.11beta3","v1.2.11beta4","v1.2.11rc1","v1.2.11rc2","v1.2.11rc3","v1.2.11rc5","v1.2.12","v1.2.13","v1.2.13beta1","v1.2.13rc1","v1.2.13rc2","v1.2.14","v1.2.14beta1","v1.2.14beta2","v1.2.14rc1","v1.2.15","v1.2.15beta1","v1.2.15beta2","v1.2.15beta3","v1.2.15beta4","v1.2.15beta5","v1.2.15beta6","v1.2.15rc1","v1.2.15rc2","v1.2.15rc3","v1.2.15rc4","v1.2.15rc5","v1.2.16","v1.2.16beta1","v1.2.16beta2","v1.2.16rc1","v1.2.17","v1.2.17beta1","v1.2.17beta2","v1.2.17rc1","v1.2.17rc2","v1.2.17rc3","v1.2.17rc4","v1.2.18","v1.2.19","v1.2.19beta1","v1.2.19beta10","v1.2.19beta11","v1.2.19beta12","v1.2.19beta13","v1.2.19beta14","v1.2.19beta15","v1.2.19beta16","v1.2.19beta17","v1.2.19beta18","v1.2.19beta19","v1.2.19beta2","v1.2.19beta20","v1.2.19beta21","v1.2.19beta22","v1.2.19beta23","v1.2.19beta24","v1.2.19beta25","v1.2.19beta26","v1.2.19beta27","v1.2.19beta28","v1.2.19beta29","v1.2.19beta3","v1.2.19beta30","v1.2.19beta31","v1.2.19beta4","v1.2.19beta5","v1.2.19beta6","v1.2.19beta7","v1.2.19beta8","v1.2.19beta9","v1.2.19rc1","v1.2.19rc2","v1.2.19rc3","v1.2.19rc4","v1.2.19rc5","v1.2.19rc6","v1.2.1beta1","v1.2.1beta2","v1.2.1beta3","v1.2.1beta4","v1.2.1rc1","v1.2.1rc2","v1.2.2","v1.2.20","v1.2.20beta01","v1.2.20beta02","v1.2.20beta03","v1.2.20beta04","v1.2.20rc1","v1.2.20rc2","v1.2.20rc3","v1.2.20rc4","v1.2.20rc5","v1.2.20rc6","v1.2.21","v1.2.21beta1","v1.2.21beta2","v1.2.21rc1","v1.2.21rc2","v1.2.21rc3","v1.2.22","v1.2.22beta1","v1.2.22beta2","v1.2.22beta3","v1.2.22beta4","v1.2.22rc1","v1.2.23","v1.2.23beta01","v1.2.23beta02","v1.2.23beta03","v1.2.23beta04","v1.2.23beta05","v1.2.23rc01","v1.2.24","v1.2.24beta01","v1.2.24beta02","v1.2.24rc01","v1.2.25","v1.2.25beta01","v1.2.25beta02","v1.2.25beta03","v1.2.25beta04","v1.2.25beta05","v1.2.25beta06","v1.2.25rc01","v1.2.25rc02","v1.2.26","v1.2.26beta01","v1.2.26beta02","v1.2.26beta03","v1.2.26beta04","v1.2.26beta05","v1.2.26beta06","v1.2.26rc01","v1.2.27","v1.2.27beta01","v1.2.27beta02","v1.2.27beta03","v1.2.27beta04","v1.2.27beta05","v1.2.27beta06","v1.2.27rc01","v1.2.28","v1.2.29","v1.2.29beta01","v1.2.29beta02","v1.2.29beta03","v1.2.29rc01","v1.2.2beta1","v1.2.2beta2","v1.2.2beta3","v1.2.2beta4","v1.2.2beta5","v1.2.2beta6","v1.2.2rc1","v1.2.3","v1.2.30","v1.2.30beta01","v1.2.30beta02","v1.2.30beta03","v1.2.30beta04","v1.2.30rc01","v1.2.30rc02","v1.2.30rc03","v1.2.30rc04","v1.2.30rc05","v1.2.30rc06","v1.2.30rc07","v1.2.30rc08","v1.2.31","v1.2.31rc01","v1.2.31rc02","v1.2.31rc03","v1.2.32","v1.2.32beta01","v1.2.32rc01","v1.2.33","v1.2.33beta01","v1.2.33rc01","v1.2.33rc02","v1.2.34","v1.2.34beta01","v1.2.34beta02","v1.2.34beta03","v1.2.34beta04","v1.2.34beta05","v1.2.34beta06","v1.2.34beta07","v1.2.34rc01","v1.2.35","v1.2.35beta01","v1.2.35beta02","v1.2.35beta03","v1.2.35rc01","v1.2.35rc02","v1.2.36","v1.2.36beta01","v1.2.36beta02","v1.2.36beta03","v1.2.36beta04","v1.2.36beta05","v1.2.37","v1.2.37beta01","v1.2.37beta02","v1.2.37beta03","v1.2.37rc01","v1.2.38","v1.2.38beta01","v1.2.38rc01","v1.2.38rc02","v1.2.38rc03","v1.2.39","v1.2.39beta01","v1.2.39beta02","v1.2.39beta03","v1.2.39beta04","v1.2.39beta05","v1.2.39rc01","v1.2.3rc1","v1.2.3rc2","v1.2.3rc3","v1.2.3rc4","v1.2.3rc5","v1.2.3rc6","v1.2.4","v1.2.40","v1.2.40beta01","v1.2.40rc01","v1.2.41","v1.2.41beta01","v1.2.41beta02","v1.2.41beta03","v1.2.41beta04","v1.2.41beta05","v1.2.41beta06","v1.2.41beta07","v1.2.41beta08","v1.2.41beta09","v1.2.41beta10","v1.2.41beta11","v1.2.41beta12","v1.2.41beta13","v1.2.41beta14","v1.2.41beta15","v1.2.41beta16","v1.2.41beta17","v1.2.41beta18","v1.2.41beta19","v1.2.41rc01","v1.2.41rc02","v1.2.41rc03","v1.2.42","v1.2.42beta01","v1.2.42beta02","v1.2.42rc01","v1.2.42rc02","v1.2.42rc03","v1.2.42rc04","v1.2.42rc05","v1.2.4beta1","v1.2.4beta2","v1.2.4beta3","v1.2.4rc1","v1.2.5","v1.2.5beta1","v1.2.5beta2","v1.2.5rc1","v1.2.5rc2","v1.2.5rc3","v1.2.6","v1.2.6beta1","v1.2.6beta2","v1.2.6beta3","v1.2.6beta4","v1.2.6rc1","v1.2.6rc2","v1.2.6rc3","v1.2.6rc4","v1.2.6rc5","v1.2.7","v1.2.7beta1","v1.2.7beta2","v1.2.7rc1","v1.2.8","v1.2.8beta1","v1.2.8beta2","v1.2.8beta3","v1.2.8beta4","v1.2.8beta5","v1.2.8rc1","v1.2.8rc2","v1.2.8rc3","v1.2.8rc4","v1.2.8rc5","v1.2.9","v1.2.9beta1","v1.2.9beta10","v1.2.9beta11","v1.2.9beta2","v1.2.9beta3","v1.2.9beta4","v1.2.9beta5","v1.2.9beta6","v1.2.9beta7","v1.2.9beta8","v1.2.9beta9","v1.2.9rc1","v1.4.0","v1.4.0beta1","v1.4.0beta10","v1.4.0beta100","v1.4.0beta101","v1.4.0beta102","v1.4.0beta104","v1.4.0beta105","v1.4.0beta106","v1.4.0beta107","v1.4.0beta108","v1.4.0beta109","v1.4.0beta11","v1.4.0beta12","v1.4.0beta13","v1.4.0beta14","v1.4.0beta15","v1.4.0beta16","v1.4.0beta17","v1.4.0beta18","v1.4.0beta19","v1.4.0beta2","v1.4.0beta20","v1.4.0beta21","v1.4.0beta22","v1.4.0beta23","v1.4.0beta24","v1.4.0beta25","v1.4.0beta26","v1.4.0beta27","v1.4.0beta28","v1.4.0beta29","v1.4.0beta3","v1.4.0beta30","v1.4.0beta31","v1.4.0beta32","v1.4.0beta33","v1.4.0beta34","v1.4.0beta35","v1.4.0beta36","v1.4.0beta37","v1.4.0beta38","v1.4.0beta39","v1.4.0beta4","v1.4.0beta40","v1.4.0beta41","v1.4.0beta42","v1.4.0beta43","v1.4.0beta44","v1.4.0beta45","v1.4.0beta46","v1.4.0beta47","v1.4.0beta48","v1.4.0beta49","v1.4.0beta5","v1.4.0beta50","v1.4.0beta51","v1.4.0beta52","v1.4.0beta53","v1.4.0beta54","v1.4.0beta55","v1.4.0beta56","v1.4.0beta57","v1.4.0beta58","v1.4.0beta6","v1.4.0beta60","v1.4.0beta61","v1.4.0beta62","v1.4.0beta63","v1.4.0beta64","v1.4.0beta65","v1.4.0beta66","v1.4.0beta67","v1.4.0beta68","v1.4.0beta69","v1.4.0beta7","v1.4.0beta70","v1.4.0beta71","v1.4.0beta73","v1.4.0beta75","v1.4.0beta76","v1.4.0beta77","v1.4.0beta78","v1.4.0beta79","v1.4.0beta8","v1.4.0beta80","v1.4.0beta81","v1.4.0beta82","v1.4.0beta83","v1.4.0beta84","v1.4.0beta85","v1.4.0beta86","v1.4.0beta87","v1.4.0beta89","v1.4.0beta9","v1.4.0beta90","v1.4.0beta91","v1.4.0beta92","v1.4.0beta93","v1.4.0beta94","v1.4.0beta95","v1.4.0beta96","v1.4.0beta98","v1.4.0beta99","v1.4.0rc03","v1.4.0rc04","v1.4.0rc05","v1.4.0rc06","v1.4.0rc07","v1.4.0rc08","v1.4.1","v1.4.1beta01","v1.4.1beta02","v1.4.1beta03","v1.4.1beta04","v1.4.1beta05","v1.4.1beta06","v1.4.1beta07","v1.4.1beta08","v1.4.1beta09","v1.4.1beta10","v1.4.1beta11","v1.4.1beta12","v1.4.1rc01","v1.4.1rc02","v1.4.1rc03","v1.4.1rc04","v1.4.2","v1.4.2beta01","v1.4.2rc01","v1.4.2rc02","v1.4.2rc03","v1.4.2rc04","v1.4.2rc05","v1.4.2rc06","v1.4.3","v1.4.3beta01","v1.4.3beta02","v1.4.3beta04","v1.4.3beta05","v1.4.3rc01","v1.4.3rc02","v1.4.3rc03","v1.4.4","v1.4.4beta01","v1.4.4beta02","v1.4.4beta03","v1.4.4beta05","v1.4.4beta06","v1.4.4beta07","v1.4.4beta08","v1.4.4rc01","v1.4.4rc02","v1.4.4rc03","v1.4.4rc04","v1.4.4rc05","v1.4.5","v1.4.5beta01","v1.4.5beta02","v1.4.5beta03","v1.4.5beta04","v1.4.5beta06","v1.4.5rc01","v1.4.5rc02","v1.4.5rc03","v1.4.6","v1.4.6beta01","v1.4.6beta03","v1.4.6beta04","v1.4.6beta06","v1.4.6beta07","v1.4.6rc01","v1.4.6rc02","v1.4.7","v1.4.7rc01","v1.4.8","v1.4.8beta01","v1.4.8beta02","v1.4.8beta03","v1.4.8beta04","v1.4.8beta05","v1.4.8rc01","v1.5.0","v1.5.0beta01","v1.5.0beta02","v1.5.0beta03","v1.5.0beta04","v1.5.0beta05","v1.5.0beta06","v1.5.0beta07","v1.5.0beta08","v1.5.0beta09","v1.5.0beta11","v1.5.0beta12","v1.5.0beta13","v1.5.0beta14","v1.5.0beta15","v1.5.0beta16","v1.5.0beta17","v1.5.0beta18","v1.5.0beta19","v1.5.0beta20","v1.5.0beta21","v1.5.0beta22","v1.5.0beta23","v1.5.0beta24","v1.5.0beta25","v1.5.0beta26","v1.5.0beta27","v1.5.0beta28","v1.5.0beta29","v1.5.0beta30","v1.5.0beta31","v1.5.0beta32","v1.5.0beta33","v1.5.0beta34","v1.5.0beta35","v1.5.0beta36","v1.5.0beta37","v1.5.0beta38","v1.5.0beta39","v1.5.0beta40","v1.5.0beta41","v1.5.0beta42","v1.5.0beta43","v1.5.0beta44","v1.5.0beta45","v1.5.0beta46","v1.5.0beta47","v1.5.0beta48","v1.5.0beta49","v1.5.0beta50","v1.5.0beta51","v1.5.0beta52","v1.5.0beta53","v1.5.0beta54","v1.5.0beta55","v1.5.0beta56","v1.5.0beta57","v1.5.0beta58","v1.5.0rc01","v1.5.0rc02","v1.5.0rc03","v1.5.0rc05","v1.5.0rc06","v1.5.1","v1.5.1beta01","v1.5.1beta02","v1.5.1beta03","v1.5.1beta04","v1.5.1beta05","v1.5.1beta06","v1.5.1beta07","v1.5.1beta08","v1.5.1beta09","v1.5.1beta10","v1.5.1beta11","v1.5.1rc01","v1.5.1rc02","v1.5.2","v1.5.2beta01","v1.5.2beta02","v1.5.2beta03","v1.5.2rc01","v1.5.2rc02","v1.5.2rc03","v1.5.3beta01","v1.5.3beta02","v1.5.3beta03","v1.5.3beta05","v1.5.3beta06","v1.5.3beta07","v1.5.3beta08","v1.5.3beta09","v1.5.3beta10","v1.5.3beta11","v1.5.3rc01","v1.5.3rc02","v1.5.4","v1.5.4beta01","v1.5.4beta02","v1.5.4beta03","v1.5.4beta04","v1.5.4beta05","v1.5.4beta06","v1.5.4beta07","v1.5.4beta08","v1.5.4rc01","v1.5.5","v1.5.5beta01","v1.5.5beta02","v1.5.5beta03","v1.5.5beta04","v1.5.5beta05","v1.5.5beta06","v1.5.5beta07","v1.5.5beta08","v1.5.5rc01","v1.5.6","v1.5.6beta01","v1.5.6beta02","v1.5.6beta03","v1.5.6beta04","v1.5.6beta05","v1.5.6beta06","v1.5.6beta07","v1.5.6rc01","v1.5.6rc02","v1.5.6rc03","v1.5.7","v1.5.7beta01","v1.5.7beta02","v1.5.7beta03","v1.5.7beta04","v1.5.7beta05","v1.5.7rc01","v1.5.7rc02","v1.5.7rc03","v1.5.8beta01","v1.5.8rc02","v1.5.9","v1.5.9beta01","v1.5.9rc01","v1.6.0","v1.6.0beta01","v1.6.0beta02","v1.6.0beta03","v1.6.0beta04","v1.6.0beta05","v1.6.0beta06","v1.6.0beta07","v1.6.0beta08","v1.6.0beta09","v1.6.0beta10","v1.6.0beta11","v1.6.0beta12","v1.6.0beta13","v1.6.0beta14","v1.6.0beta15","v1.6.0beta16","v1.6.0beta17","v1.6.0beta18","v1.6.0beta19","v1.6.0beta21","v1.6.0beta22","v1.6.0beta23","v1.6.0beta24","v1.6.0beta25","v1.6.0beta26","v1.6.0beta27","v1.6.0beta28","v1.6.0beta29","v1.6.0beta30","v1.6.0beta31","v1.6.0beta32","v1.6.0beta33","v1.6.0beta34","v1.6.0beta35","v1.6.0beta36","v1.6.0beta37","v1.6.0beta38","v1.6.0beta39","v1.6.0beta40","v1.6.0rc01","v1.6.0rc02","v1.6.0rc03","v1.6.0rc04","v1.6.0rc05","v1.6.0rc06","v1.6.0rc07","v1.6.0rc08","v1.6.1","v1.6.10","v1.6.10beta01","v1.6.10beta02","v1.6.10rc01","v1.6.10rc02","v1.6.10rc03","v1.6.11","v1.6.11beta01","v1.6.11beta02","v1.6.11beta03","v1.6.11beta04","v1.6.11beta05","v1.6.11beta06","v1.6.11rc01","v1.6.11rc02","v1.6.12","v1.6.12rc01","v1.6.12rc02","v1.6.12rc03","v1.6.13","v1.6.13beta01","v1.6.13beta02","v1.6.13beta03","v1.6.13beta04","v1.6.13rc01","v1.6.14","v1.6.14beta01","v1.6.14beta02","v1.6.14beta03","v1.6.14beta04","v1.6.14beta05","v1.6.14beta06","v1.6.14beta07","v1.6.14rc01","v1.6.14rc02","v1.6.15","v1.6.15beta01","v1.6.15beta02","v1.6.15beta03","v1.6.15beta04","v1.6.15beta05","v1.6.15beta06","v1.6.15beta07","v1.6.15beta08","v1.6.15rc01","v1.6.15rc02","v1.6.15rc03","v1.6.16","v1.6.16beta01","v1.6.16beta02","v1.6.16beta03","v1.6.16rc01","v1.6.16rc02","v1.6.16rc03","v1.6.17","v1.6.17-master","v1.6.17beta01","v1.6.17beta02","v1.6.17beta03","v1.6.17beta04","v1.6.17beta05","v1.6.17rc01","v1.6.17rc02","v1.6.17rc03","v1.6.17rc04","v1.6.17rc05","v1.6.17rc06","v1.6.18","v1.6.18-master","v1.6.18beta01","v1.6.18beta02","v1.6.18beta03","v1.6.18beta04","v1.6.18beta05","v1.6.18beta06","v1.6.18beta07","v1.6.18beta08","v1.6.18beta09","v1.6.18rc01","v1.6.18rc02","v1.6.18rc03","v1.6.19","v1.6.19beta01","v1.6.19beta02","v1.6.19beta03","v1.6.19beta04","v1.6.19rc01","v1.6.19rc02","v1.6.19rc03","v1.6.19rc04","v1.6.1beta01","v1.6.1beta02","v1.6.1beta03","v1.6.1beta04","v1.6.1beta05","v1.6.1beta06","v1.6.1beta07","v1.6.1beta08","v1.6.1beta09","v1.6.1rc01","v1.6.2","v1.6.20beta01","v1.6.20beta02","v1.6.20beta03","v1.6.20rc01","v1.6.20rc02","v1.6.21","v1.6.21beta01","v1.6.21beta02","v1.6.21beta03","v1.6.21rc01","v1.6.21rc02","v1.6.22","v1.6.22beta01","v1.6.22beta02","v1.6.22beta03","v1.6.22beta04","v1.6.22beta05","v1.6.22beta06","v1.6.22rc01","v1.6.22rc02","v1.6.22rc03","v1.6.23","v1.6.23beta01","v1.6.23rc01","v1.6.23rc02","v1.6.24","v1.6.24beta01","v1.6.24beta02","v1.6.24beta03","v1.6.24beta04","v1.6.24beta05","v1.6.24beta06","v1.6.24rc01","v1.6.24rc02","v1.6.24rc03","v1.6.25","v1.6.25beta02","v1.6.25rc03","v1.6.25rc04","v1.6.26","v1.6.26beta01","v1.6.26beta02","v1.6.26beta03","v1.6.26beta04","v1.6.26beta05","v1.6.26beta06","v1.6.26rc01","v1.6.27","v1.6.27beta01","v1.6.27rc01","v1.6.28","v1.6.28rc01","v1.6.28rc02","v1.6.28rc03","v1.6.29","v1.6.29beta01","v1.6.29beta02","v1.6.29beta03","v1.6.29rc01","v1.6.2beta01","v1.6.2beta02","v1.6.2rc01","v1.6.2rc02","v1.6.2rc03","v1.6.2rc04","v1.6.2rc05","v1.6.2rc06","v1.6.3","v1.6.30","v1.6.30beta01","v1.6.30beta02","v1.6.30beta03","v1.6.30beta04","v1.6.30rc01","v1.6.31","v1.6.31beta01","v1.6.31beta02","v1.6.31beta03","v1.6.31beta04","v1.6.31beta05","v1.6.31beta06","v1.6.31beta07","v1.6.31rc01","v1.6.31rc02","v1.6.32","v1.6.32beta01","v1.6.32beta02","v1.6.32beta03","v1.6.32beta05","v1.6.32beta06","v1.6.32beta07","v1.6.32beta08","v1.6.32beta09","v1.6.32beta10","v1.6.32beta11","v1.6.32rc01","v1.6.32rc02","v1.6.33","v1.6.33beta01","v1.6.33beta02","v1.6.33beta03","v1.6.33rc01","v1.6.33rc02","v1.6.34","v1.6.35","v1.6.35beta01","v1.6.36","v1.6.37","v1.6.38","v1.6.39","v1.6.3beta01","v1.6.3beta02","v1.6.3beta03","v1.6.3beta04","v1.6.3beta05","v1.6.3beta06","v1.6.3beta07","v1.6.3beta08","v1.6.3beta09","v1.6.3beta10","v1.6.3rc01","v1.6.4","v1.6.40","v1.6.41","v1.6.42","v1.6.43","v1.6.44","v1.6.45","v1.6.46","v1.6.47","v1.6.48","v1.6.49","v1.6.4beta02","v1.6.4rc01","v1.6.5","v1.6.50","v1.6.51","v1.6.52","v1.6.53","v1.6.6","v1.6.7","v1.6.7beta01","v1.6.7beta02","v1.6.7beta03","v1.6.7beta04","v1.6.7rc01","v1.6.7rc02","v1.6.8","v1.6.8beta01","v1.6.8beta02","v1.6.8rc02","v1.6.9","v1.6.9beta01","v1.6.9beta02","v1.6.9beta03","v1.6.9rc01","v1.6.9rc02"],"database_specific":{"vanir_signatures":[{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-010f10be","target":{"file":"png.c"},"source":"https://github.com/pnggroup/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["327333362595809855009709216293242458091","279773453140246214690474345717570130546","115820707951216701988175577087939699096","311171675743028020374147954611376107950","167668607726485798520722745583647935882","334738595734899256725134661017463305676"]}},{"signature_type":"Function","deprecated":false,"id":"CVE-2026-22801-13e3a59d","target":{"file":"png.c","function":"png_get_copyright"},"source":"https://github.com/pnggroup/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"function_hash":"154053324026357579622821123918096375308","length":481}},{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-3d373722","target":{"file":"png.h"},"source":"https://github.com/pnggroup/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["166375070723291529406421301066248769034","275647010778297936193963675511576832388","256826767335212246520616614652191899280","279336807821086835335477021495116274772","21410732896831932727182998172814220178","106550426482539417114549859700126206902","247197528077876204962072745179511874496","327509478853766906744281300346084898016"]}},{"signature_type":"Line","deprecated":false,"id":"CVE-2026-22801-5469271d","target":{"file":"pngtest.c"},"source":"https://github.com/pnggroup/libpng/commit/02f2b4f4699f0ef9111a6534f093b53732df4452","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["61817495566730883906655567599472824457","275257476952071577898258900499903171964","91397839701035180686538087820368727519","158625912433874676602721644606842363619"]}}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-22801.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}]}