If a software use libpng to read images that only come from installation directory, I don't think it's really a problem to link statically libpng.
For example a GUI that loads icons, background images, button images etc.
For example a GUI that loads icons, background images, button images etc.
Kinda good example right here: https://www.youtube.com/watch?v=CkPAgv1Gjz0
Maybe Nintendo never considered someone screwing around with their network to load an arbitrary image in a place that only Nintendo-Generated Mii png images should be but then I found a way... and if that libpng was vulnerable, suddenly we've gained usermode execution on a Wii U. Or worse yet, similar to the Sony PSP .tiff image exploit, maybe after gaining usermode we find a kernel-mode exploit and attack that. Now, we're near the realm of game piracy and private keys.