RHSA-2026%3A26347

RHSA-2026%3A26347 PUBLISHED CVSS 7.5 HIGH

A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can still be referenced, leading to a use-after-free condition. An attacker could potentially exploit this to achieve arbitrary code execution or cause a denial of service.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Red Hat	libpng15-debuginfo-0:1.5.30-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debuginfo-0:1.5.30-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debugsource-0:1.5.30-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debuginfo-0:1.5.30-9.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debuginfo-0:1.5.30-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debugsource-0:1.5.30-9.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debugsource-0:1.5.30-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debugsource-0:1.5.30-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debuginfo-0:1.5.30-9.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-debugsource-0:1.5.30-9.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8
Red Hat	libpng15-0:1.5.30-9.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)	1.5.30-9.el8, 1.5.30-9.el8

Timeline

Jun 16, 2026 CVE Published
Jun 24, 2026 Distribution Patch
Jun 24, 2026 Distribution Patch
Jun 24, 2026 Security Advisory
Jun 24, 2026 Security Advisory
Jun 25, 2026 CVE Updated

References

Open in Interactive Console →