CVE-2016-10087
Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087) It was discovered that libpng incorrectly handled certain malformed images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14048) It was discovered that libpng incorrectly handled memory when freeing certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-7317) It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-33416) It was discovered that libpng incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-33636) It was discovered that libpng incorrectly handled memory when processing certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-34757) Seung Min Shin discovered that libpng incorrectly handled certain animated images. An attacker could possibly use this issue to cause libpng to misinterpret image data. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2026-40930)
CSIRTS triage
- What
- Multiple vulnerabilities in libpng involving incorrect handling of text chunks, malformed images, and memory management that can lead to denial of service or arbitrary code execution.
- Who is affected
- Ubuntu 14.04 LTS, 16.04 LTS, and 18.04 LTS systems with libpng are affected; specific libpng versions are not listed.
- Urgency
- Moderate to high urgency; memory corruption and RCE are possible, though exploitation status is unconfirmed.
- Action
- Apply the Ubuntu security update USN-8639-1 for libpng and verify affected systems are patched.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2016-10087
Get an email if CVE-2016-10087 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Moderate exploitation risk5.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 92% of all EPSS-scored CVEs.
Advisory coverage (1)
- unknownUSN-8639-1: libpng vulnerabilitiesubuntu · 2026-08-17
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2016-10087)