Skip to content
Critical Vulnerabilities in Coin3D Affect Multiple Ubuntu Releases

Critical Vulnerabilities in Coin3D Affect Multiple Ubuntu Releases

First seen 7 May 2026, 14:22 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 8, 2026 at 14:08 UTC
  • •Coin3D vulnerabilities affect Ubuntu 18.04, 16.04, and 14.04 LTS versions.
  • •CVE-2022-25235 and CVE-2022-25236 could allow attackers to execute arbitrary code.
  • •Users are urged to update their systems to the latest package versions to mitigate risks.

On May 7, 2026, Ubuntu announced security vulnerabilities in Coin3D, affecting Ubuntu LTS releases 18.04, 16.04, and 14.04. The vulnerabilities stem from Expat's improper handling of certain files, potentially allowing attackers to crash the system or execute arbitrary code. The affected versions include libcoin80-runtime and libcoin80, with specific updates available for Ubuntu Pro users. The vulnerabilities are identified as CVE-2022-25235 and CVE-2022-25236, both published on February 16, 2022. Users are advised to perform standard system updates to mitigate the risks. The issue highlights the ongoing need for vigilance in maintaining software security across supported systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 127d ago How this analysis works

Timeline

2022-02-16
CVE-2022-25236 published
CVE-2022-25236 was published, detailing a vulnerability in Coin3D's Expat handling.
Linuxsecurity
2022-02-16
CVE-2022-25235 published
CVE-2022-25235 was published, highlighting another vulnerability in Coin3D.
Linuxsecurity
2026-05-07
Ubuntu announces Coin3D vulnerabilities
Ubuntu disclosed vulnerabilities in Coin3D affecting multiple LTS releases, urging users to update.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2022-25235 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2