Skip to content
OpenAdvisories
High RHSA-2026:4728 3 CVEs

Red Hat Security Advisory: libpng security update

Published Mar 18, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng 2:1.6.34-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng-debuginfo 2:1.6.34-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng-debugsource 2:1.6.34-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng-devel 2:1.6.34-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng-devel-debuginfo 2:1.6.34-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos libpng-tools-debuginfo 2:1.6.34-10.el8_10

Vulnerabilities 3

  • High 8.3
    CVE-2026-25646

    LIBPNG has a heap buffer overflow in png_set_quantize

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function i…

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.8
    CVE-2026-22801

    LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bi…

    pnggroup libpng fltk libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.1
    CVE-2026-22695

    LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read whe…

    pnggroup libpng libpng1.6 libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2428824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2428825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2438542
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4728.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-22695
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-22695
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-22695
  • article
    https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea
  • article
    https://github.com/pnggroup/libpng/commit/e4f7ad4ea2
  • article
    https://github.com/pnggroup/libpng/issues/778
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp
  • report
    https://access.redhat.com/security/cve/CVE-2026-22801
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-22801
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-22801
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8
  • report
    https://access.redhat.com/security/cve/CVE-2026-25646
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-25646
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-25646
  • article
    http://www.openwall.com/lists/oss-security/2026/02/09/7
  • article
    https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88
  • article
    https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3