CVE-2026-42057 is a high-severity vulnerability in vtk version 9.6 affecting the vtkPNGReader::vtkPNGReaderUpdate2 function. It involves an invalid pointer dereference triggered by processing a specially crafted PNG file, which can cause a denial of service (application crash). No confidentiality or integrity impact is reported. No known exploits in the wild have been documented.