Medium severity5.5NVD Advisory· Published Sep 28, 2026

CVE-2026-94287

Description

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

Affected products

Xorg/Libxpmllm-fuzzy
Range: <3.5.19

Patches

Vulnerability mechanics

References

gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32/diffsnvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000