Threats Tagged 'cve-2026-3713'

This Red Hat Security Advisory addresses multiple vulnerabilities affecting Red Hat Hardened Images RPM packages, specifically updates to libpng components. The advisory includes fixes for several CVEs, including CVE-2025-28162 and others, related to memory safety issues such as buffer overflows and out-of-bounds reads. The update provides bug fixes and enhancements to libpng RPMs for aarch64 and x86_64 architectures. No known exploits in the wild have been reported for these vulnerabilities. The advisory does not explicitly state the patch status but implies that updated RPMs have been released.

CVE-2026-3713 is a heap-based buffer overflow vulnerability in the pnggroup libpng library up to version 1. 6. 55. It affects the function do_pnm2png in the file contrib/pngminus/pnm2png. c, where manipulation of the width and height arguments can cause the overflow. Exploitation requires local access and no user interaction. Although an exploit has been published, the project has not yet responded with a fix.