The libpng library, which provides functions for creating and manipulating PNG image files, contains three security vulnerabilities affecting Red Hat Enterprise Linux 8.2 AUS. These are a buffer overflow (CVE-2025-64720), a heap buffer overflow (CVE-2025-65018), and an out-of-bounds read vulnerability in the png_image_read_composite function (CVE-2025-66293). These issues could potentially lead to memory corruption or information disclosure. Red Hat Product Security has released updated libpng packages to remediate these vulnerabilities as detailed in advisory RHSA-2026:0323. The advisory classifies the update as important and provides links to the fixed packages and further remediation instructions.

The vulnerabilities in libpng could allow an attacker to cause memory corruption through buffer overflows or out-of-bounds reads when processing specially crafted PNG files. This may lead to application crashes or potentially arbitrary code execution depending on the context of use. However, there are no known exploits in the wild at this time. The impact is rated as high severity due to the nature of the vulnerabilities and their presence in a widely used image processing library.

Red Hat has released updated libpng packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 8.2 AUS should apply the security update as described in the Red Hat advisory RHSA-2026:0323 and the referenced article https://access.redhat.com/articles/11258. Applying this update will remediate the buffer overflow and out-of-bounds read issues. No additional mitigation steps are required beyond applying the official patch.