CVE-2026-94287
published 2026-09-28CVE-2026-94287: A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and…
PriorityP419medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.10%
0.8th percentile
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ubuntu | libxpm | — | — |
| x.org | libxpm | < 3.5.19 | 3.5.19 |
| x.org | libxpm | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libXpm vulnerability
vendor_ubuntu·2026-10-01
CVE-2026-94287 libXpm vulnerability
Title: libXpm vulnerability
Summary: libXpm could be made to crash if it opened a specially crafted file.
It was discovered that libXpm did not correctly handle XPM images with
zero-dimension values. A local attacker could possibly use this issue to
cause libXpm to use excessive resources, leading to a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
libXpm: libXpm: Denial of Service via unsigned integer underflow
vendor_redhat·2026-09-28·CVSS 5.5
CVE-2026-94287 [MEDIUM] CWE-191 libXpm: libXpm: Denial of Service via unsigned integer underflow
libXpm: libXpm: Denial of Service via unsigned integer underflow
A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption that leads to a Denial of Service (DoS).
Package: libXpm (Red Hat Enterprise Linux 10) - Fix deferred
Package: libXpm (Red Hat Enterprise Linux 6) - Out of support scope
Package: libXpm (Red Hat Enterprise Linux 7) - Fix deferred
Package: libXpm (Red Hat Enterprise Linux 8) - Fix deferred
Package: libXpm (Red Hat Enterprise Linux 9) - Fix deferred
Package: libXpm (Red Hat Hardened Images) - Affected
GHSA
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
ghsa_unreviewed·2026-09-28
CVE-2026-94287 [MEDIUM] CWE-1050 A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow [fedora-all]
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-94287 [MEDIUM] CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow [fedora-all]
CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
Bugzilla
CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow
bugzilla·2026-09-28·CVSS 5.5
CVE-2026-94287 [MEDIUM] CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow
CVE-2026-94287 libXpm: libXpm: Denial of Service via unsigned integer underflow
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
2026-09-28
Published