Vulnerability record/PUBLISHED/Published Nov 2, 2026 19:54:09 UTC
CVE-2026-58936
In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritygoogle_android
Last updatedNov 2, 2026 19:54:09 UTC
PublishedNov 2, 2026 19:54:09 UTC
ReservedJul 2, 2026 06:14:16 UTC