Skip to content
OpenAdvisories
Medium USN-7993-1 2 CVEs

libpng1.6 vulnerabilities

Published Feb 2, 2026 · Updated Apr 22, 2026

Summary

It was discovered that libpng incorrectly handled memory when processing
certain malformed PNG files. If a user or automated system were tricked
into opening a specially crafted PNG file, an attacker could use this issue
to cause libpng to crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS libpng1.6 1.6.43-5ubuntu0.4

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2025-28162
  • report
    https://ubuntu.com/security/CVE-2025-28164