Graal is not affected by the libpng-Bug
 

Some security holes have been found in libpng, the library is used for loading pngs in browsers or paint programs. Graal is not affected by that problem - In Graal Delphi (2.2) we use our own png implementation, in Graal v3 we use libmng which is a complete rewrite of the png/mng reading code and is doing checks on invalid input.
But other programs are affected, so update your browser (or switch to Mozilla/Firefox if you are still using IE) and install the libpng patch (if you are on Linux).