Skip to content
5.5 Medium

CVE-2026-94287 A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local…

Description

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

Affected products and versions

Product Affected versions Fixed in
libXpm 3.5 earliest → < 3.5.19 3.5.19

References

Timeline

  1. Published
  2. Last modified
Track this CVE