Known vulnerabilities in libpng (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libpng (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libpng_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.2.50-1ubuntu2.14.04.3+esm2
1.6.20-2ubuntu0.1~esm4
1.2.54-1ubuntu1.1+esm3
1.6.34-1ubuntu0.18.04.2+esm3
1.6.37-2ubuntu0.1~esm3
1.6.37-3ubuntu0.6
1.2.50-1ubuntu2.14.04.3+esm1
1.2.54-1ubuntu1.1+esm2
1.2.46-3ubuntu4.3
1.2.54
1.2.50
1.2.46
1.2.50-1ubuntu2.14.04.3
1.2.54-1ubuntu1.1
1.2.15~beta5-0
1.2.15~beta5-1
1.2.15~beta5-2
1.2.15~beta5-2.1
1.2.15~beta5-3
1.5.2-1
1.5.2-2
1.5.2-3
1.5.4-1
1.5.4-2
1.5.5-1
1.5.6-1
1.5.7-1
1.5.7-2
1.5.8-1
1.5.9-1
1.5.10-1
1.5.10-2
1.5.10-3
1.5.11-1
1.2.54-2
1.2.54-3
1.2.54-4
1.2.54-5
1.2.54-6
1.2.54-6ubuntu1
1.2.54-1ubuntu2
1.2.54-1ubuntu1
1.2.50-2
1.2.54-1
1.2.51-0ubuntu3.15.10.2
1.2.51-0ubuntu3.15.10.1
1.2.51-0ubuntu3.15.04.2
1.2.50-1ubuntu3
1.2.51-0ubuntu2
1.2.51-0ubuntu3
1.2.51-0ubuntu3.15.04.1
1.2.50-1ubuntu2.14.04.2
1.2.46-4
1.2.46-5
1.2.47-1
1.2.47-2
1.2.49-1
1.2.49-1ubuntu1
1.2.49-1ubuntu2
1.2.49-2
1.2.49-3
1.2.49-4
1.2.49-4ubuntu1
1.2.49-5
1.2.49-5ubuntu1
1.2.50-1
1.2.50-1ubuntu1
1.2.50-1ubuntu2
1.2.50-1ubuntu2.14.04.1
1.2.46-3ubuntu4.2
0.89c-1
0.89c-2
0.89c-3
0.89c-4
0.89c-5
0.89c-6
1.0.0-0.1
1.0.1-0.1
1.0.1-0.2
1.0.2-0.1
1.0.2-1
1.0.2-1.1
1.0.2b-0.1
1.0.3-1
1.0.5-0.1
1.0.5-1
1.0.8-1
1.0.10-1
1.0.10-2
1.0.11-1
1.0.12-1
1.0.12-2
1.0.12-3
1.2.8rel-3
1.2.8rel-4
1.2.8rel-5
1.2.8rel-5.1
1.2.8rel-5.2
1.2.8rel-6
1.2.8rel-7
1.2.12-0
1.2.13-0
1.2.13-1
1.2.13-2
1.2.13-3
1.2.13-4
1.2.26-1
1.2.27-1
1.2.27-2
1.2.32-1
1.2.33-1
1.2.33-2
1.2.35-1
1.2.36-1
1.2.37-1
1.2.38-1
1.2.39-1
1.2.40-1
1.2.41-1
1.2.41-1ubuntu1
1.2.42-1
1.2.42-1ubuntu1
1.2.42-2
1.2.43-1
1.2.44-1
1.2.44-2
1.2.44-3
1.2.46-1
1.2.46-2
1.2.46-3
1.2.46-3ubuntu1
1.2.46-3ubuntu2
1.2.46-3ubuntu3
1.2.46-3ubuntu4
1.2.46-3ubuntu4.1
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131563 - Interpretation Conflict CVE-2026-40930 |
CWE-436 | Medium | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 15.05.2026 |
SB2026051550 SB20260529200 SB20260529201 and 2 more |
||
| #VU125602 - Use After Free CVE-2026-34757 |
CWE-416 | Low | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 09.04.2026 |
SB2026040960 SB2026042128 SB20260422224 and 12 more |
||
| #VU125601 - Use After Free CVE-2026-33416 |
CWE-416 | High | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 60 more |
||
| #VU125600 - Out-of-bounds read CVE-2026-33636 |
CWE-125 | Medium | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 46 more |
||
| #VU122489 - Heap-based Buffer Overflow CVE-2026-25646 |
CWE-122 | High | 1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm2 | 10.02.2026 |
SB2026021002 SB2026021255 SB2026021256 and 64 more |
||
| #VU118780 - Out-of-bounds read CVE-2025-64505 |
CWE-125 | Medium | 1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm2 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 22 more |
||
| #VU18304 - Memory corruption CVE-2018-14048 |
CWE-119 | High | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 18.04.2019 |
SB2019041812 SB2019080303 SB2019050660 and 4 more |
||
| #VU17708 - Use After Free CVE-2019-7317 |
CWE-416 | Low | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 14.02.2019 |
SB2019011606 SB2019041812 SB2019042401 and 46 more |
||
| #VU39764 - NULL Pointer Dereference CVE-2016-10087 |
CWE-476 | Medium | 1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 31.01.2017 |
SB2017013107 SB2017010206 SB2017010207 and 15 more |