https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:25:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12811 bdu:2026-12811 https://cve.radiocsirt.org/vuln/bdu:2026-12811 https://cve.radiocsirt.org/vuln/bell-cve-2026-4367 <p><strong>Affected:</strong> Alpaquita:23: libxpm, Alpaquita:25: libxpm, Alpaquita:stream: libxpm, BellSoft Hardened Containers:23: libxpm, BellSoft Hardened Containers:25: libxpm, BellSoft Hardened Containers:stream: libxpm</p> <p><strong>Affected:</strong> Alpaquita:23: libxpm, Alpaquita:25: libxpm, Alpaquita:stream: libxpm, BellSoft Hardened Containers:23: libxpm, BellSoft Hardened Containers:25: libxpm, BellSoft Hardened Containers:stream: libxpm</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-4367 https://cve.radiocsirt.org/vuln/euvd-2026-341914 EUVD-2026-341914 https://cve.radiocsirt.org/vuln/euvd-2026-341914 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4367 <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4367 https://cve.radiocsirt.org/vuln/ghsa-c2rx-36v4-qc8g <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> https://cve.radiocsirt.org/vuln/ghsa-c2rx-36v4-qc8g https://cve.radiocsirt.org/vuln/jvndb-2026-000070 <p>libXpm provided by X.Org Foundation incorrectly handles malformed XPM files, leading to an out-of-bounds read vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/125.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Out-of-bounds read (CWE-125) - CVE-2026-4367&lt;/li&gt;&lt;/ul&gt;Naoki Wakamatsu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>libXpm provided by X.Org Foundation incorrectly handles malformed XPM files, leading to an out-of-bounds read vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/125.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Out-of-bounds read (CWE-125) - CVE-2026-4367&lt;/li&gt;&lt;/ul&gt;Naoki Wakamatsu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000070 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4367 msrc_CVE-2026-4367 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4367 https://cve.radiocsirt.org/vuln/oesa-2026-2151 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libXpm, openEuler:22.03-LTS-SP4: libXpm, openEuler:24.03-LTS: libXpm, openEuler:24.03-LTS-SP1: libXpm, openEuler:24.03-LTS-SP3: libXpm</p> <p>X.Org X11 libXpm runtime library Security Fix(es):</p> <p>A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality.Upgrading to version 3.5.19 eliminates this vulnerability. Applying the patch 5448e1bd is able to eliminate this problem. The bugfix is ready for download at gitlab.freedesktop.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2026-4367)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libXpm, openEuler:22.03-LTS-SP4: libXpm, openEuler:24.03-LTS: libXpm, openEuler:24.03-LTS-SP1: libXpm, openEuler:24.03-LTS-SP3: libXpm</p> <p>X.Org X11 libXpm runtime library Security Fix(es):</p> <p>A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality.Upgrading to version 3.5.19 eliminates this vulnerability. Applying the patch 5448e1bd is able to eliminate this problem. The bugfix is ready for download at gitlab.freedesktop.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2026-4367)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2151 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10608-1 <p>libXpm-devel-3.5.18-2.1 on GA media</p> <p>libXpm-devel-3.5.18-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10608-1 https://cve.radiocsirt.org/vuln/rhsa-2026:30354 <p>libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing</p> <p>libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2026:30354 https://cve.radiocsirt.org/vuln/suse-su-2026:22121-1 <p>Security update for libXpm</p> <p>Security update for libXpm</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22121-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4367 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxpm, Ubuntu:14.04:LTS: motif, Ubuntu:Pro:16.04:LTS: libxpm, Ubuntu:16.04:LTS: motif, Ubuntu:Pro:18.04:LTS: libxpm, Ubuntu:18.04:LTS: motif, Ubuntu:20.04:LTS: libxpm, Ubuntu:20.04:LTS: motif, Ubuntu:22.04:LTS: libxpm, Ubuntu:22.04:LTS: motif and 6 more</p> <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxpm, Ubuntu:14.04:LTS: motif, Ubuntu:Pro:16.04:LTS: libxpm, Ubuntu:16.04:LTS: motif, Ubuntu:Pro:18.04:LTS: libxpm, Ubuntu:18.04:LTS: motif, Ubuntu:20.04:LTS: libxpm, Ubuntu:20.04:LTS: motif, Ubuntu:22.04:LTS: libxpm, Ubuntu:22.04:LTS: motif and 6 more</p> <p>A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file&#39;s end, leading to application crashes and Denial of Service conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4367 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1223 <p>Ein Angreifer kann eine Schwachstelle in OpenBSD ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann eine Schwachstelle in OpenBSD ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1223