HomeDefectsLIN1023-37802
Acknowledged

LIN1023-37802 : Security Advisory - libxpm - CVE-2026-94287

Created: Oct 23, 2026    Updated: Oct 27, 2026
Resolved Date: Oct 23, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
Data source: SUSE (meissner@suse.de)