TI-2026-76160 CVE-2026-112008 · GHSA-xx2v-hjr6-76fh
Heap buffer overflow in libmng ORDR chunk handling
Priority MEDIUM 64
libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in…