Critical Security Flaw in libpng: Integer Truncation and Buffer Overflows
Summary
RLSA-2026:3551: Important: libpng security update. Affects libpng versions < 2:1.6.40-8.el10_1.2. Fixed in 2:1.6.40-8.el10_1.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libpng is a widely used library that provides functions for creating and manipulating Portable Network Graphics (PNG) image files. It is essential for applications that require image processing capabilities. The library is known for its efficiency and flexibility in handling PNG images, making it a staple in various software applications. However, recent vulnerabilities have raised concerns about its security, particularly regarding integer truncation and heap buffer overflows, which can lead to severe security risks.
Vulnerability Detail
The vulnerabilities in libpng include an integer truncation issue in the simplified write API, which can lead to information disclosure and denial of service (CVE-2026-22801). Additionally, there is a heap buffer over-read vulnerability in the png_image_finish_read function (CVE-2026-22695), and a heap buffer overflow in the png_set_quantize function (CVE-2026-25646). These vulnerabilities can be exploited by attackers to manipulate PNG files, potentially leading to unauthorized access to sensitive information or application crashes.
How To Fix
Minimum fixed version
2:1.6.40-8.el10_1.2
This is the first release that contains the fix.
sudo dnf update libpngTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to applications that utilize libpng until the update can be applied. Additionally, review and validate any PNG files processed by your applications to mitigate potential risks.
Conclusion
The vulnerabilities in libpng pose significant security risks, including potential information disclosure and denial of service. It is crucial to update to the latest patched version to safeguard your applications. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for libpng →
FAQ
libpng is a library used for handling PNG image files, providing functions for creating and manipulating these images.
The main vulnerabilities include integer truncation, heap buffer over-read, and heap buffer overflow, which can lead to information disclosure and denial of service.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
The CVSS score for this vulnerability is 7.0, indicating a high severity level.
If you cannot update immediately, restrict access to applications using libpng and validate PNG files to reduce risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for libpng.
