https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T03:02:54.388433+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-94287 CVE-2026-94287 — Denial of service via unsigned underflow in libXpm's write path 2026-10-03T03:02:54.784540+00:00

Affected: x.org libXpm

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

 https://vulnerability.circl.lu/vuln/usn-8862-1 USN-8862-1 — libxpm vulnerability 2026-10-03T03:02:54.784646+00:00

Affected: Ubuntu:22.04:LTS: libxpm, Ubuntu:24.04:LTS: libxpm, Ubuntu:26.04:LTS: libxpm

It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service.