{"id":"CVE-2026-22020","aliases":["UBUNTU-CVE-2026-22020"],"status":"published","description":"[updated libpng in Oracle Java]","facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2026-04-28T00:00:00Z","modified":"2026-11-10T02:50:22Z","exploits":[{"source":"pocgithub","id":"George0Papasotiriou/CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction","title":"George0Papasotiriou/CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction","date":"2026-08-04","url":"https://github.com/George0Papasotiriou/CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2","21.0.12+8-1~20.04","21.0.12.1+1-1~20.04.4","21.0.13.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]}],"references":[{"url":"https://ubuntu.com/security/CVE-2026-22020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22020","tags":["report"]}],"sources":{"osv":[{"id":"UBUNTU-CVE-2026-22020","description":"[updated libpng in Oracle Java]","status":"published","published":"2026-04-28T00:00:00Z","modified":"2026-11-10T02:50:22.828134543Z","updated_at":"2026-11-10T03:18:58.75419Z"}]}}