The libpng library in Red Hat Enterprise Linux 10.0 Extended Update Support contains multiple vulnerabilities: CVE-2026-22801 involves information disclosure and denial of service caused by integer truncation in the simplified write API; CVE-2026-22695 involves denial of service and information disclosure due to a heap buffer over-read in the png_image_finish_read function; CVE-2026-25646 is a heap buffer overflow vulnerability in the png_set_quantize function. These vulnerabilities could allow attackers to cause denial of service or leak information when processing specially crafted PNG files. Red Hat has issued an update (RHSA-2026:3577) that fixes these vulnerabilities in libpng version 1.6.40-8.el10_0.2 for Red Hat Enterprise Linux 10.0 Extended Update Support across multiple architectures.

Successful exploitation of these vulnerabilities could lead to denial of service conditions or information disclosure on affected systems running vulnerable versions of libpng. The issues arise from memory handling errors such as integer truncation, heap buffer over-read, and heap buffer overflow in libpng functions. There is no indication of known exploits in the wild at this time.

Red Hat has released an official security update (RHSA-2026:3577) that addresses these vulnerabilities in libpng. Users of Red Hat Enterprise Linux 10.0 Extended Update Support should apply the provided libpng package updates (version 1.6.40-8.el10_0.2) as detailed in the Red Hat advisory and article https://access.redhat.com/articles/11258. Applying this update will remediate the vulnerabilities. No additional mitigation steps are indicated by the vendor.