Skip to content
OpenAdvisories
Unscored USN-8639-1 0 CVEs

libpng, libpng1.6 vulnerabilities

Published Aug 17, 2026 · Updated Aug 18, 2026

Summary

Patrick Keshishian discovered that libpng incorrectly handled certain
text chunks. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087)

It was discovered that libpng incorrectly handled certain malformed
images. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14048)

It was discovered that libpng incorrectly handled memory when freeing
certain images. An attacker could possibly use this issue to cause
a denial of service. This issue only affected Ubuntu 16.04 LTS.
(CVE-2019-7317)

It was discovered that libpng incorrectly handled memory when
processing certain images. An attacker could possibly use this issue
to cause a denial of service, or execute arbitrary code. This issue only
affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS. (CVE-2026-33416)

It was discovered that libpng incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 20.04 LTS.
(CVE-2026-33636)

It was discovered that libpng incorrectly handled memory when
processing certain images. An attacker could possibly use this issue
to cause a denial of service or obtain sensitive information. This issue
only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS. (CVE-2026-34757)

Seung Min Shin discovered that libpng incorrectly handled certain
animated images. An attacker could possibly use this issue to cause
libpng to misinterpret image data. This issue only affected Ubuntu
20.04 LTS and Ubuntu 22.04 LTS. (CVE-2026-40930)

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libpng1.6 1.6.37-3ubuntu0.6
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS libpng 1.2.50-1ubuntu2.14.04.3+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libpng 1.2.54-1ubuntu1.1+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libpng1.6 1.6.20-2ubuntu0.1~esm4
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS libpng1.6 1.6.34-1ubuntu0.18.04.2+esm3
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS libpng1.6 1.6.37-2ubuntu0.1~esm3

References

  • report
    https://ubuntu.com/security/CVE-2016-10087
  • report
    https://ubuntu.com/security/CVE-2018-14048
  • report
    https://ubuntu.com/security/CVE-2019-7317
  • report
    https://ubuntu.com/security/CVE-2026-33416
  • report
    https://ubuntu.com/security/CVE-2026-33636
  • report
    https://ubuntu.com/security/CVE-2026-34757
  • report
    https://ubuntu.com/security/CVE-2026-40930