Back Linuxsecurity

Mageia 9: libpng Important Heap Buffer Over-Read Issues MGASA-2026

Linuxsecurity •LinuxSecurity Advisories • January 17, 2026

Description: LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix). (CVE-2026-22695) LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*. (CVE-2026-22801)

- - - -

MGASA-2026-0010 - Updated libpng packages fix security vulnerabilities

- 9/core/libpng-1.6.38-1.3.mga9

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mageia 9: libpng Heap Buffer Over-Read Vulnerabilities Identified Mageia 9 has reported important heap buffer over-read vulnerabilities in the libpng library. These include a regression issue in png_image_read_direct_scaled (CVE-2026-22695) and an integer truncation problem in png_image_write_* (CVE-2026-22801). Affected users should take note of these vulnerabilities for potential impacts on their systems. 1 sources 43

Extracted Entities

CVEs (3)

CVE-2025-65018 CVE-2026-22695 CVE-2026-22801

Platforms (1)

Mageia