X.org Libxpm
6 CVEs affecting X.org Libxpm. Latest disclosed: 2026-09-28. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10164 | Critical | 9.8 | 2017-02-01 | Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a deni… |
CVE-2022-4883 | High | 8.8 | 2023-02-07 | A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on t… |
CVE-2022-46285 | High | 7.5 | 2023-02-07 | A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infi… |
CVE-2022-44617 | High | 7.5 | 2023-02-06 | A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an… |
CVE-2026-94287 | Medium | 5.5 | 2026-09-28 | A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and mem… |
CVE-2023-43788 | Medium | 5.5 | 2023-10-10 | A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger… |