CVE-2026-4367 in libXpminfo

Prediction

by VulDB Data Team • 05/14/2026

A security vulnerability has been detected in X.org libXpm up to 3.5.4. The affected element is the function xpmNextWord. The manipulation leads to out-of-bounds read. The attack must be carried out from within the local network. Upgrading to version 3.5.19 is sufficient to fix this issue. The identifier of the patch is 5448e1bd. You should upgrade the affected component.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-4367
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4367
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-4367/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!