Skip to content
OpenAdvisories
High RHSA-2026:0212 3 CVEs

Red Hat Security Advisory: libpng security update

Published Jan 8, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng 2:1.6.40-8.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng-debuginfo 2:1.6.40-8.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng-debugsource 2:1.6.40-8.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng-devel 2:1.6.40-8.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng-devel-debuginfo 2:1.6.40-8.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libpng-tools-debuginfo 2:1.6.40-8.el10_0.1

Vulnerabilities 3

  • High 7.1
    CVE-2025-64720 Public exploit

    LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when proces…

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.1
    CVE-2025-65018 Public exploit

    LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API functio…

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.1
    CVE-2025-66293

    LIBPNG has an out-of-bounds read in png_image_read_composite

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond …

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2416904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2416907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2418711
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0212.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-64720
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-64720
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-64720
  • article
    https://github.com/pnggroup/libpng/commit/08da33b4c88cfcd36e5a706558a8d7e0e4773643
  • article
    https://github.com/pnggroup/libpng/issues/686
  • article
    https://github.com/pnggroup/libpng/pull/751
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-hfc7-ph9c-wcww
  • report
    https://access.redhat.com/security/cve/CVE-2025-65018
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-65018
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-65018
  • article
    https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d
  • article
    https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea
  • article
    https://github.com/pnggroup/libpng/issues/755
  • article
    https://github.com/pnggroup/libpng/pull/757
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g
  • report
    https://access.redhat.com/security/cve/CVE-2025-66293
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-66293
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-66293
  • article
    https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1
  • article
    https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a
  • article
    https://github.com/pnggroup/libpng/issues/764
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f