Details:
The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.
Security Fix(es):
libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
2:1.6.37-15.el9_8.22:1.6.37-15.el9_8.22:1.6.37-15.el9_8.22:1.6.37-15.el9_8.22:1.6.37-15.el9_8.22:1.6.37-15.el9_8.2Exploitability
AV:NAC:LPR:NUI:RScope
S:UImpact
C:LI:LA:H7.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H