Known vulnerabilities in libXpm

Vendor: xorg.freedesktop.org
Software: libXpm
Software CPE: cpe:2.3:a:xorg.freedesktop.org:libxpm:*:*:*:*:*:*:*:*
Website: https://xorg.freedesktop.org
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libXpm libXpm is affected by 8 known vulnerabilities: 1 high, 1 medium, 6 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126829 - Out-of-bounds read
CVE-2026-4367		 CWE-125 Medium
No
No
 3.5.19 22.04.2026 SB20260422186
SB2026050329
SB2026071783
and 1 more
#VU81436 - Out-of-bounds read
CVE-2023-43789		 CWE-125 Low
No
No
 3.5.17 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 36 more
#VU81435 - Out-of-bounds read
CVE-2023-43788		 CWE-125 Low
No
No
 3.5.17 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 37 more
#VU71485 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24040		 CWE-200 Low
No
No
 3.5.15 24.01.2023 SB2023011734
#VU71484 - Stack-based buffer overflow
CVE-2023-24039		 CWE-121 High
No
No
 3.5.15 24.01.2023 SB2023011734
#VU71236 - Untrusted Search Path
CVE-2022-4883		 CWE-426 Low
No
No
 3.5.15 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 38 more
#VU71235 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-44617		 CWE-835 Low
No
No
 3.5.15 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 34 more
#VU71234 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-46285		 CWE-835 Low
Available
No
 3.5.15 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 35 more