CVE-2011-3026: Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a...

Security readout for executives and security teams

This older issue is an integer overflow in libpng as used by Google Chrome before 17.0.963.56. A remote attacker could cause a browser crash or possibly other unspecified impact. The source bundle does not provide CVSS, a complete affected-product list, or active exploitation evidence. Most exposure is likely in obsolete Chrome installations, legacy OS images, or applications carrying old libpng packages. The bundle does not provide a complete CPE matrix, so confirm exposure through installed package and application inventories rather than product-name assumptions. Treat this as a legacy hygiene issue unless old browsers, unsupported systems, or embedded libpng copies remain. It should be prioritized during legacy asset cleanup and vulnerability backlog review, not as an active-exploitation emergency based on the provided evidence. Mitigation focus: Upgrade Chrome to 17.0.963.56 or later where Chrome is in scope.; Update libpng packages using applicable Apple, Gentoo, SUSE, or vendor advisories.; Check vendor guidance for any embedded or bundled libpng copies..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.