PT-2026-6541 · Unknown+1 · Libpng-Tools+3

Published 2026-02-02 · Updated 2026-02-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.6.43-5ubuntu0.4

Description The software does not correctly manage memory when processing specific, intentionally altered PNG files. An attacker could exploit this by tricking a user or automated system into opening a malicious PNG file, potentially causing the software to crash and leading to a denial of service.

Recommendations Update libpng-dev to version 1.6.43-5ubuntu0.4. Update libpng-tools to version 1.6.43-5ubuntu0.4. Update libpng16-16t64 to version 1.6.43-5ubuntu0.4. Run sudo pro fix USN-7993-1 to resolve the issue.

Related Identifiers

USN-7993-1

Affected Products

Libpng

Libpng-Dev

Libpng-Tools

Libpng16-16T64

References · 4

• https://ubuntu.com/security/CVE-2025-28162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-28164 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7993-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7993-1 · Vendor Advisory