USN-8251-1: libpng1.6 Ubuntu
Vulnerability summary
USN-8251-1 is a vulnerability in libpng1.6 Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 0 · Downstream 0 · Related 3Timeline
- 07-05-2026PublishedVulnerability first disclosed.
- 20-05-2026Last modifiedVulnerability information updated.
Description
libpng1.6 vulnerabilities It was discovered that libpng incorrectly handled memory when processing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-33416) It was discovered that libpng incorrectly handled expanding 8-bit paletted rows to RGB or RGBA on ARM processors. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-33636) It was discovered that libpng incorrectly handled certain setter APIs. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-34757)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- libpng1.6< 1.6.37-3ubuntu0.5 | < 1.6.43-5ubuntu0.6 | < 1.6.50-1ubuntu0.5
1 vendor · 1 product