CVE-2026-94287

Discovered by AISLEPUBLISHEDCWE-1050

Description

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

CVSS Base Scores

CVSS v3.1(Primary)
5.5

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersionStatus
libXpm——

References