@patchhawk_

🦅 The changelog says "bug fixes." The diff says "security patch." We track CVE-less fixes so defenders don't fly blind. New drop every Thursday. @78_lab

Joined June 2026
  • Tweets163
  • Following2
  • Followers73
52Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
PatchHawk scans release diffs for security fixes. For selected cases, we share the input, Docker steps, and before/after logs so you can check our work: github.com/78ResearchLab/Pat… Follow @patchhawk_ for more patch notes backed by code. #PatchHawk #78ResearchLab

GitHub - 78ResearchLab/PatchHawk-PoC

Contribute to 78ResearchLab/PatchHawk-PoC development by creating an account on GitHub.

github.com
2
2
132
PatchHawk flagged pngrutil.c in the diff. We ran the same PNG through libpng’s public API on both releases. ASan caught a one-byte read from freed memory in 1.6.58. The 1.6.59 run ended with a handled parser error and no ASan finding. PoC: github.com/78ResearchLab/Pat…
2
2
3
159
In our test, a broken zTXt chunk leaves zlib pointing into libpng’s chunk buffer. The next, larger tEXt chunk frees that buffer. In 1.6.59, libpng clears the pointer before releasing the stream. Patch: github.com/pnggroup/libpng/c…
CVE-2026-46675 in libpng. The PRE panel says this helper did not exist in 1.6.58. The POST panel shows the full new function: it sets next_in and next_out to NULL, then avail_in and avail_out to zero. The other card shows where libpng calls it before releasing the stream.

ALT CVE-2026-46675 in libpng. The PRE panel says this helper did not exist in 1.6.58. The POST panel shows the full new function: it sets next_in and next_out to NULL, then avail_in and avail_out to zero. The other card shows where libpng calls it before releasing the stream.

1
2
2
151
libpng 1.6.58 has a use-after-free in an unusual read path. A crafted PNG can make libpng read freed memory if an app calls png_read_end() after png_read_info() but before reading any image rows. Version 1.6.59 fixes it. Advisory: github.com/pnggroup/libpng/s…
CVE-2026-46675 in libpng. Two stacked code panels show the compressed-text release path. In 1.6.58, it only sets zowner to zero. In 1.6.59, it calls png_inflate_detach_buffers first. The error check above and the end of the block remain visible. For a crafted PNG and a read-end call before any image rows, the old path could use a pointer to freed data.

ALT CVE-2026-46675 in libpng. Two stacked code panels show the compressed-text release path. In 1.6.58, it only sets zowner to zero. In 1.6.59, it calls png_inflate_detach_buffers first. The error check above and the end of the block remain visible. For a crafted PNG and a read-end call before any image rows, the old path could use a pointer to freed data.

1
2
3
153
Load more