Skip to content
USN-8639-1: libpng vulnerabilities

USN-8639-1: libpng vulnerabilities

Ubuntu August 17, 2026

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2016-10087 ) It was discovered that libpng incorrectly handled certain malformed images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. ( CVE-2018-14048 ) It was discovered that libpng incorrectly handled memory when freeing certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2019-7317 ) It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service, or execute...

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2016-10087 )

It was discovered that libpng incorrectly handled certain malformed images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. ( CVE-2018-14048 )

It was discovered that libpng incorrectly handled memory when freeing certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2019-7317 )

It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service, or execute...

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2016-10087 ) It was discovered that libpng incorrectly handled certain malformed images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. ( CVE-2018-14048 ) It was discovered that libpng incorrectly handled memory when freeing certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2019-7317 ) It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. ( CVE-2026-33416 ) It was discovered that libpng incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. ( CVE-2026-33636 ) It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. ( CVE-2026-34757 ) Seung Min Shin discovered that libpng incorrectly handled certain animated images. An attacker could possibly use this issue to cause libpng to misinterpret image data. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. ( CVE-2026-40930 )

Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2016-10087 )

It was discovered that libpng incorrectly handled certain malformed images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. ( CVE-2018-14048 )

It was discovered that libpng incorrectly handled memory when freeing certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. ( CVE-2019-7317 )

It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. ( CVE-2026-33416 )

It was discovered that libpng incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. ( CVE-2026-33636 )

It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. ( CVE-2026-34757 )

Seung Min Shin discovered that libpng incorrectly handled certain animated images. An attacker could possibly use this issue to cause libpng to misinterpret image data. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. ( CVE-2026-40930 )

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.