Red Hat issued a security advisory (RHSA-2026:42125) for Red Hat Hardened Images RPMs, addressing a vulnerability tracked as CVE-2026-57053. The update includes new versions of libidn2 packages (idn2-2.3.8-4.hum1 and libidn2-2.3.8-4.hum1) for aarch64 and x86_64 architectures. The vulnerability is associated with CWE-125 (out-of-bounds read). The advisory does not specify exact affected versions but provides updated RPMs as a fix. There are no known exploits in the wild, and no CVSS score is assigned. The vendor advisory is the authoritative source for patch and remediation status.

The vulnerability involves an out-of-bounds read (CWE-125) in the libidn2 component of Red Hat Hardened Images RPMs, which could potentially lead to information disclosure or application instability. However, no known exploits have been reported in the wild. The impact is assessed as medium severity by the vendor.

A fix is available through updated RPM packages for libidn2 (version 2.3.8-4.hum1) provided by Red Hat. Users of Red Hat Hardened Images should apply these updates as per the vendor's instructions to remediate the vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.