Skip to content
Multiple libpng Vulnerabilities Lead to Denial of Service Risks in Ubuntu

Multiple libpng Vulnerabilities Lead to Denial of Service Risks in Ubuntu

First seen 20 Aug 2026, 11:54 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 21, 2026 at 11:17 UTC
  • •Multiple vulnerabilities in libpng affect Ubuntu versions 14.04, 16.04, 18.04, and 20.04 LTS.
  • •Denial of service and potential arbitrary code execution are possible attack vectors.
  • •Users are urged to update their libpng packages to the latest versions to mitigate risks.

Recent vulnerabilities in the libpng library have been discovered, affecting various versions of Ubuntu, including 14.04, 16.04, 18.04, and 20.04 LTS. The issues, identified by Patrick Keshishian, involve improper handling of text chunks and malformed images, potentially leading to denial of service or arbitrary code execution. Specifically, CVE-2016-10087, CVE-2018-14048, CVE-2019-7317, CVE-2026-33416, and CVE-2026-33636 are among the critical vulnerabilities reported. The most recent vulnerabilities were published on March 26, 2026, and are particularly concerning for users of Ubuntu 20.04 LTS. Users are advised to update their systems to mitigate these risks. The vulnerabilities primarily affect systems running outdated versions of the libpng library.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 53d ago How this analysis works

Timeline

2016-01-30
CVE-2016-10087 published
libpng vulnerability discovered affecting Ubuntu 16.04 LTS, leading to potential denial of service.
Ubuntu
2018-07-13
CVE-2018-14048 published
Vulnerability in libpng affects Ubuntu 18.04 LTS, allowing for denial of service via malformed images.
Ubuntu
2019-02-04
CVE-2019-7317 published
libpng vulnerability identified affecting Ubuntu 16.04 LTS, with potential for denial of service.
Ubuntu
2026-03-26
CVE-2026-33416 published
Critical vulnerability in libpng affects multiple Ubuntu versions, allowing for denial of service or code execution.
Linuxsecurity
2026-03-26
CVE-2026-33636 published
Another libpng vulnerability discovered, specifically affecting Ubuntu 20.04 LTS, with similar risks.
Linuxsecurity
2026-04-09
CVE-2026-34757 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-04
CVE-2026-40930 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-17
USN-8639-1 released
Ubuntu released security notice USN-8639-1 addressing multiple libpng vulnerabilities.
Ubuntu
2026-08-19
Linuxsecurity article published
Linuxsecurity reported on the critical libpng vulnerabilities and the need for immediate updates.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2016-10087 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 2