CVE-2026-64612: Libpng Missing Error Handler

Creating a libpng read structure with NULL error handlers and without setjmp error recovery causes libpng to execute its default error handler (abort()) on malformed PNG files, causing a process crash.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-64612-libpng-missing-error-handler --engine opengrep

Description

Creating a libpng read structure with NULL error handlers and without setjmp error recovery causes libpng to execute its default error handler (abort()) on malformed PNG files, causing a process crash.