CVE-2026-3713

A flaw was found in libpng. A local attacker could exploit this vulnerability by manipulating the width/height arguments in the do_pnm2png function of the pnm2png component. This manipulation causes a heap-based buffer overflow, which could lead to information disclosure and denial of service (DoS).

This MODERATE impact heap-based buffer overflow in the pnm2png utility of libpng requires local execution to exploit.

The libpng packages shipped with Red Hat Enterprise Linux are not affected by this vulnerability.

The issue originates from the pnm2png utility present in the upstream libpng source tree under the contrib/pngminus/ directory. This component is not part of the libpng build process in RHEL, is not included in the packaging specification, and is not present in any shipped binary RPMs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, avoid processing untrusted image data with the pnm2png utility. Restrict execution of pnm2png to trusted users and ensure that only trusted image files are processed.