The libpng library in Red Hat Enterprise Linux 9 contains three distinct vulnerabilities: CVE-2026-22801 involves information disclosure and denial of service caused by integer truncation in the simplified write API; CVE-2026-22695 involves denial of service and information disclosure due to a heap buffer over-read in the png_image_finish_read function; CVE-2026-25646 is a heap buffer overflow vulnerability in the png_set_quantize function. These vulnerabilities can lead to denial of service and potential information leakage when processing specially crafted PNG files. Red Hat has released updated libpng packages to fix these issues as detailed in advisory RHSA-2026:3405.

Successful exploitation of these vulnerabilities could allow an attacker to cause denial of service conditions or disclose sensitive information by triggering integer truncation, heap buffer over-read, or heap buffer overflow in libpng when processing PNG images. This affects systems running vulnerable versions of libpng on Red Hat Enterprise Linux 9 and related variants. There are no known exploits in the wild at this time.

Red Hat has released updated libpng packages addressing these vulnerabilities. Users of Red Hat Enterprise Linux 9 and related products should apply the security update described in advisory RHSA-2026:3405 promptly. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.