Skip to content
OpenAdvisories
Critical USN-5432-1 2 CVEs

libpng vulnerabilities

Published May 23, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2017-12652)

Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2018-14048)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libpng 1.2.54-1ubuntu1.1+esm1

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2017-12652
  • report
    https://ubuntu.com/security/CVE-2018-14048