Known vulnerabilities in libpng1.6 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libpng1.6 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libpng16_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
14
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.37-3ubuntu0.5
1.6.43-5ubuntu0.6
1.6.50-1ubuntu0.5
1.6.37-3ubuntu0.4
1.6.43-5ubuntu0.5
1.6.50-1ubuntu0.4
1.6.20-2ubuntu0.1~esm3
1.6.34-1ubuntu0.18.04.2+esm2
1.6.37-2ubuntu0.1~esm2
1.6.43-5ubuntu0.4
1.6.37-3ubuntu0.3
1.6.43-5ubuntu0.3
1.6.47-1.1ubuntu0.3
1.6.50-1ubuntu0.3
1.6.20-2ubuntu0.1~esm2
1.6.34-1ubuntu0.18.04.2+esm1
1.6.37-2ubuntu0.1~esm1
1.6.37-3ubuntu0.1
1.6.43-5ubuntu0.1
1.6.47-1.1ubuntu0.1
1.6.50-1ubuntu0.1
1.6.50-1~exp1
1.6.49-1~exp1
1.6.48-1
1.6.47-1
1.6.47-1.1
1.6.46-4
1.6.46-3
1.6.46-2
1.6.46-1
1.6.45-1
1.6.44-3
1.6.44-2
1.6.44-1
1.6.43-5build1
1.6.43-4
1.6.43-5
1.6.43-3
1.6.43-1exp1
1.6.43-2
1.6.43-1
1.6.42-1
1.6.41-1
1.6.40-3
1.6.40-2
1.6.40-1
1.6.39-2
1.6.39-1
1.6.38-1
1.6.38-2
1.6.37-4
1.6.37-5
1.6.37-3build5
1.6.37-3build4
1.6.37-3build3
1.6.37-3build2
1.6.37-3build1
1.6.37-3
1.6.20
1.6.37
1.6.37-2
1.6.37-1
1.6.34
1.6.36-5~build4
1.6.36-5~build3
1.6.36-4~build1
1.6.37-1~exp3
1.6.37-1~exp4
1.6.37-1~exp1
1.6.37-1~exp2
1.6.36-5exp1
1.6.36-6
1.6.36-5~build5
1.6.36-5~build2
1.6.36-5~build1
1.6.36-4
1.6.36-5
1.6.36-3
1.6.36-2~build1
1.6.36-2
1.6.36-1
1.6.34-2~build1
1.6.34-2ubuntu0.1
1.6.34-2
1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.1
1.6.34-1ubuntu0.17.10.1
1.6.33-1
1.6.34-1
1.6.32-3
1.6.32-2
1.6.32-1
1.6.31-1~exp1
1.6.31-1
1.6.29-1~build1
1.6.26-6~build1
1.6.26-5~build1
1.6.26-4~build1
1.6.30-2
1.6.30-1
1.6.29-3
1.6.28-1exp1
1.6.28-1exp2
1.6.28-1exp3
1.6.28-1exp4
1.6.29-1
1.6.29-2
1.6.28-1
1.6.27-1
1.6.26-6
1.6.26-5
1.6.26-3
1.6.26-4
1.6.26-2ubuntu1
1.6.26-2
1.6.25-2
1.6.26-1
1.6.25-1
1.6.24-2
1.6.24-1
1.6.23-1
1.6.22-1
1.6.21-5
1.6.21-4
1.6.7-1
1.6.8-1
1.6.8-2
1.6.10-1
1.6.10-2
1.6.16-1
1.6.19-1
1.6.20-1
1.6.20-1.1
1.6.20-2
1.6.20-3
1.6.21-1
1.6.21-2
1.6.21-3
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125602 - Use After Free CVE-2026-34757 |
CWE-416 | Low | 1.6.37-3ubuntu0.5, 1.6.43-5ubuntu0.6, 1.6.50-1ubuntu0.5 | 09.04.2026 |
SB2026040960 SB2026042128 SB20260422224 and 12 more |
||
| #VU125601 - Use After Free CVE-2026-33416 |
CWE-416 | High | 1.6.37-3ubuntu0.5, 1.6.43-5ubuntu0.6, 1.6.50-1ubuntu0.5 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 60 more |
||
| #VU125600 - Out-of-bounds read CVE-2026-33636 |
CWE-125 | Medium | 1.6.37-3ubuntu0.5, 1.6.43-5ubuntu0.6, 1.6.50-1ubuntu0.5 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 46 more |
||
| #VU122489 - Heap-based Buffer Overflow CVE-2026-25646 |
CWE-122 | High | 1.6.20-2ubuntu0.1~esm3, 1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.4, 1.6.43-5ubuntu0.5, 1.6.50-1ubuntu0.4 | 10.02.2026 |
SB2026021002 SB2026021255 SB2026021256 and 64 more |
||
| #VU122295 - Missing release of memory after effective lifetime CVE-2025-28162 |
CWE-401 | Medium | 1.6.43-5ubuntu0.4 | 04.02.2026 |
SB2026020422 SB2026020423 SB2026020425 and 8 more |
||
| #VU122293 - Missing release of memory after effective lifetime CVE-2025-28164 |
CWE-401 | Medium | 1.6.43-5ubuntu0.4 | 04.02.2026 |
SB2026020422 SB2026020423 SB2026020425 and 7 more |
||
| #VU121184 - Out-of-bounds read CVE-2026-22801 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm3, 1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.3, 1.6.43-5ubuntu0.3, 1.6.47-1.1ubuntu0.3, 1.6.50-1ubuntu0.3 | 13.01.2026 |
SB2026011311 SB20260114154 SB2026012271 and 24 more |
||
| #VU121183 - Out-of-bounds read CVE-2026-22695 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm3, 1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.3, 1.6.43-5ubuntu0.3, 1.6.47-1.1ubuntu0.3, 1.6.50-1ubuntu0.3 | 13.01.2026 |
SB2026011311 SB20260114154 SB2026012137 and 24 more |
||
| #VU119115 - Out-of-bounds read CVE-2025-66293 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm3, 1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.3, 1.6.43-5ubuntu0.3, 1.6.47-1.1ubuntu0.3, 1.6.50-1ubuntu0.3 | 03.12.2025 |
SB2025120348 SB20251210187 SB2025121761 and 41 more |
||
| #VU118780 - Out-of-bounds read CVE-2025-64505 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm2, 1.6.34-1ubuntu0.18.04.2+esm1, 1.6.37-2ubuntu0.1~esm1, 1.6.37-3ubuntu0.1, 1.6.43-5ubuntu0.1, 1.6.47-1.1ubuntu0.1, 1.6.50-1ubuntu0.1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 22 more |
||
| #VU118779 - Out-of-bounds read CVE-2025-64506 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm2, 1.6.34-1ubuntu0.18.04.2+esm1, 1.6.37-2ubuntu0.1~esm1, 1.6.37-3ubuntu0.1, 1.6.43-5ubuntu0.1, 1.6.47-1.1ubuntu0.1, 1.6.50-1ubuntu0.1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 9 more |
||
| #VU118778 - Out-of-bounds read CVE-2025-64720 |
CWE-125 | Medium | 1.6.20-2ubuntu0.1~esm2, 1.6.34-1ubuntu0.18.04.2+esm1, 1.6.37-2ubuntu0.1~esm1, 1.6.37-3ubuntu0.1, 1.6.43-5ubuntu0.1, 1.6.47-1.1ubuntu0.1, 1.6.50-1ubuntu0.1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 40 more |
||
| #VU118777 - Heap-based Buffer Overflow CVE-2025-65018 |
CWE-122 | Critical | 1.6.20-2ubuntu0.1~esm2, 1.6.34-1ubuntu0.18.04.2+esm1, 1.6.37-2ubuntu0.1~esm1, 1.6.37-3ubuntu0.1, 1.6.43-5ubuntu0.1, 1.6.47-1.1ubuntu0.1, 1.6.50-1ubuntu0.1 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 46 more |
||
| #VU17708 - Use After Free CVE-2019-7317 |
CWE-416 | Low | 1.6.34-1ubuntu0.18.04.2, 1.6.34-2ubuntu0.1 | 14.02.2019 |
SB2019011606 SB2019041812 SB2019042401 and 46 more |