Known vulnerabilities in libpng (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libpng_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libpng (Ubuntu package) libpng (Ubuntu package) is affected by 9 known vulnerabilities: 3 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131563 - Interpretation Conflict
CVE-2026-40930
CWE-436 Medium
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 15.05.2026 SB2026051550
SB20260529200
SB20260529201
and 2 more
#VU125602 - Use After Free
CVE-2026-34757
CWE-416 Low
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 09.04.2026 SB2026040960
SB2026042128
SB20260422224
and 12 more
#VU125601 - Use After Free
CVE-2026-33416
CWE-416 High
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 09.04.2026 SB2026040959
SB2026040962
SB2026040963
and 60 more
#VU125600 - Out-of-bounds read
CVE-2026-33636
CWE-125 Medium
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 09.04.2026 SB2026040959
SB2026040962
SB2026040963
and 46 more
#VU122489 - Heap-based Buffer Overflow
CVE-2026-25646
CWE-122 High
No
No
1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm2 10.02.2026 SB2026021002
SB2026021255
SB2026021256
and 64 more
#VU118780 - Out-of-bounds read
CVE-2025-64505
CWE-125 Medium
No
No
1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm2 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 22 more
#VU18304 - Memory corruption
CVE-2018-14048
CWE-119 High
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 18.04.2019 SB2019041812
SB2019080303
SB2019050660
and 4 more
#VU17708 - Use After Free
CVE-2019-7317
CWE-416 Low
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 14.02.2019 SB2019011606
SB2019041812
SB2019042401
and 46 more
#VU39764 - NULL Pointer Dereference
CVE-2016-10087
CWE-476 Medium
No
No
1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm3, 1.6.20-2ubuntu0.1~esm4, 1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 31.01.2017 SB2017013107
SB2017010206
SB2017010207
and 15 more