azure linux libXpm vulnerabilities

Latest azure linux libXpm CVEs

Newest publication first

1. CVE-2026-4367 Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

   Published 2026-06-16

   Medium·CVSS 5.5 EPSS 0.13%

   A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord() function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an interna...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.