p PatchFirst

CVE-2026-4367

CVE-2026-4367 · Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.

CVSS 5.5 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat hardened images

    Versions
    • ≥ 3.5.17-7.2.hum1: Not affected (rpm)

    No fix published

  • red hat hardened images

    Versions
    • ≥ 3.5.19-4.hum1: Not affected (rpm)

    No fix published

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • libxpm Debian:12

    Versions
    • 1:3.5.12-1.1
    • 1:3.5.12-1.1+deb12u1
    • 1:3.5.17-1
    • 1:3.5.19-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Debian:13

    Versions
    • 1:3.5.17-1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.17-1+deb13u1

    Update to 1:3.5.17-1+deb13u1

  • libxpm Debian:14

    Versions
    • 1:3.5.17-1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.19-1

    Update to 1:3.5.19-1

  • libxpm Ubuntu:Pro:14.04:LTS

    Versions
    • 1:3.5.10-1
    • 1:3.5.10-1ubuntu0.1
    • 1:3.5.10-1ubuntu0.1+esm1
    • 1:3.5.10-1ubuntu0.1+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:14.04:LTS

    Versions
    • 2.3.4-4
    • 2.3.4-5
    • 2.3.4-5ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:Pro:16.04:LTS

    Versions
    • 1:3.5.11-1
    • 1:3.5.11-1ubuntu0.16.04.1
    • 1:3.5.11-1ubuntu0.16.04.1+esm1
    • 1:3.5.11-1ubuntu0.16.04.1+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:16.04:LTS

    Versions
    • 2.3.4-8ubuntu1
    • 2.3.4-9
    • 2.3.4-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:Pro:18.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.18.04.2
    • 1:3.5.12-1ubuntu0.18.04.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:18.04:LTS

    Versions
    • 2.3.7-2
    • 2.3.8-1
    • 2.3.8-2
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:20.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.20.04.1
    • 1:3.5.12-1ubuntu0.20.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:20.04:LTS

    Versions
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:22.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1build1
    • 1:3.5.12-1build2
    • 1:3.5.12-1ubuntu0.22.04.1
    • 1:3.5.12-1ubuntu0.22.04.2
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.22.04.3

    Update to 1:3.5.12-1ubuntu0.22.04.3

  • motif Ubuntu:22.04:LTS

    Versions
    • 2.3.8-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:24.04:LTS

    Versions
    • 1:3.5.12-1.1ubuntu1
    • 1:3.5.17-1
    • 1:3.5.17-1build1
    • 1:3.5.17-1build2
    Affected ranges
    • ECOSYSTEM: < 1:3.5.17-1ubuntu0.24.04.1

    Update to 1:3.5.17-1ubuntu0.24.04.1

  • motif Ubuntu:24.04:LTS

    Versions
    • 2.3.8-3
    • 2.3.8-3.1
    • 2.3.8-3.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxpm Ubuntu:25.10

    Versions
    • 1:3.5.17-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • motif Ubuntu:25.10

    Versions
    • 2.3.8-4
    • 2.3.8-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →