Vulnerability Description
A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2026:30354
- https://access.redhat.com/errata/RHSA-2026:47072
- https://access.redhat.com/security/cve/CVE-2026-4367
- https://bugzilla.redhat.com/show_bug.cgi?id=2448984
- https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/5448e1bd
- https://seclists.org/oss-sec/2026/q2/192
- http://www.openwall.com/lists/oss-security/2026/04/21/3
FAQ
What is CVE-2026-4367?
CVE-2026-4367 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X Pi...
How severe is CVE-2026-4367?
CVE-2026-4367 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-4367?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.