CVE-2026-41216 is an invalid pointer dereference vulnerability in the vtkPNGReader::ExecuteInformation function of vtk version 9.6. A specially crafted PNG file can cause a denial of service by triggering this flaw. This vulnerability allows an attacker to crash the application processing the malicious PNG file.