The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write     exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit paletted rows     to RGB or RGBA, the Neon loop processes a final partial chunk without verifying that enough input pixels     remain. Because the implementation works backward from the end of the row, the final iteration     dereferences pointers before the start of the row buffer (OOB read) and writes expanded pixel data to the     same underflowed positions (OOB write). This is reachable via normal decoding of attacker-controlled PNG     input if Neon is enabled. Version 1.6.56 fixes the issue. (CVE-2026-33636)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-33636

high Nessus Plugin ID 303835

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.11 Apr 14, 2026, 10:48 PM Detection (updated detection logic) Plugin Feed: 202604142248
Version 1.10 Apr 13, 2026, 9:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604132127
Version 1.9 Apr 13, 2026, 9:49 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604130949
Version 1.8 Apr 3, 2026, 3:52 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604031552
Version 1.7 Apr 1, 2026, 4:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604011653
Version 1.6 Apr 1, 2026, 10:26 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604011026
Version 1.5 Mar 31, 2026, 4:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603310403
Version 1.4 Mar 28, 2026, 12:01 PM CVSS metrics ("CVSSv2 score" set to 5.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P". "CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:P") CVSSv2 severity (based on CVE-2026-33636, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202603281201
Version 1.2 Mar 27, 2026, 2:12 PM CVSS metrics ("CVSSv3 score" set to 7.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H") Plugin Feed: 202603271412
Version 1.1 Mar 26, 2026, 6:10 PM New Plugin Feed: 202603261810