以下是该漏洞的关键信息，使用简洁的Markdown格式返回： --- Summary CVE ID: CVE-2026-22801 Severity: Moderate (CVSS v3: 6.8/10) Package: libpng Affected Versions: >= 1.6.26, <= 1.6.53 Patched Versions: 1.6.54 --- Technical Details Vulnerability Mechanism - Integer truncation in and - Negative row stride or stride exceeding 65535 bytes causes the issue Attack Scenarios - Negative stride: Heap over-read or infinite loop - Large positive stride: Data corruption Impact - Information Disclosure: Adjacent heap data exposure - Denial of Service: Infinite loop or crashes - Data Corruption: Incorrect image data Exploitability - Attack Complexity: Low - Attack Vector: Local - User Interaction: None - Privileges Required: None --- Fix Key changes: Removed truncating casts, replaced with , preserving sign. --- Detection --- Testing Expected results: Vulnerable versions (1.6.26-1.6.53): Heap-buffer-overflow read or infinite loop Fixed versions (1.6.54+): Clean execution --- Timeline ---