Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2026-4367

CVSS 3.1
5.5 medium
EPSS
<1%p3
Published
·
Modified
Analyze CVE-2026-4367 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.

Weakness
CWE-125
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

1 story