Multiple libpng Vulnerabilities Lead to Denial of Service Risks in Ubuntu

Multiple libpng Vulnerabilities Lead to Denial of Service Risks in Ubuntu

First seen 20 Aug 2026, 11:54 UTC •UbuntuLinuxsecurity •91% similarity •70.5

Article Content

Browse articles
ThreatCluster

Recent vulnerabilities in the libpng library have been discovered, affecting various versions of Ubuntu, including 14.04, 16.04, 18.04, and 20.04 LTS. The issues, identified by Patrick Keshishian, involve improper handling of text chunks and malformed images, potentially leading to denial of service or arbitrary code execution. Specifically, CVE-2016-10087, CVE-2018-14048, CVE-2019-7317, CVE-2026-33416, and CVE-2026-33636 are among the critical vulnerabilities reported. The most recent vulnerabilities were published on March 26, 2026, and are particularly concerning for users of Ubuntu 20.04 LTS. Users are advised to update their systems to mitigate these risks. The vulnerabilities primarily affect systems running outdated versions of the libpng library.

Key Points: • Multiple vulnerabilities in libpng affect Ubuntu versions 14.04, 16.04, 18.04, and 20.04 LTS. • Denial of service and potential arbitrary code execution are possible attack vectors. • Users are urged to update their libpng packages to the latest versions to mitigate risks.

ThreatCluster AI How this analysis works

Timeline

2016-01-30
CVE-2016-10087 published
libpng vulnerability discovered affecting Ubuntu 16.04 LTS, leading to potential denial of service.
Ubuntu
2018-07-13
CVE-2018-14048 published
Vulnerability in libpng affects Ubuntu 18.04 LTS, allowing for denial of service via malformed images.
Ubuntu
2019-02-04
CVE-2019-7317 published
libpng vulnerability identified affecting Ubuntu 16.04 LTS, with potential for denial of service.
Ubuntu
2026-03-26
CVE-2026-33416 published
Critical vulnerability in libpng affects multiple Ubuntu versions, allowing for denial of service or code execution.
Linuxsecurity
2026-03-26
CVE-2026-33636 published
Another libpng vulnerability discovered, specifically affecting Ubuntu 20.04 LTS, with similar risks.
Linuxsecurity
2026-04-09
CVE-2026-34757 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-04
CVE-2026-40930 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-17
USN-8639-1 released
Ubuntu released security notice USN-8639-1 addressing multiple libpng vulnerabilities.
Ubuntu
2026-08-19
Linuxsecurity article published
Linuxsecurity reported on the critical libpng vulnerabilities and the need for immediate updates.
Linuxsecurity

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Ubuntu Linux