CVE-2026-4367 | X.org libXpm up to 3.5.4 xpmNextWord out-of-bounds (5448e1bd)

A vulnerability identified as problematic has been detected in X.org libXpm up to 3.5.4. The affected element is the function xpmNextWord. The manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-4367. The attack must be carried out from within the local network. There is no available exploit.

You should upgrade the affected component.