CVE-2026-4367: Out-of-bounds Read in Red Hat Red Hat Hardened Images
A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.
AI Analysis
Technical Summary
The vulnerability in libXpm arises from improper boundary validation in the xpmNextWord() function, allowing a local low-privilege user to trigger an out-of-bounds read by supplying a crafted or very small X PixMap image file. This results in reading beyond the file's end, potentially causing application crashes and denial of service. Red Hat Hardened Images RPMs have been updated to versions libXpm-3.5.17-7.2.hum1 and libXpm-3.5.19-4.hum1 to fix this issue. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with attack vector local, low attack complexity, low privileges required, no user interaction, and impacts availability only.
Potential Impact
Successful exploitation of this vulnerability can cause application crashes and denial of service conditions due to out-of-bounds reads in the libXpm library when processing maliciously crafted XPM image files. There is no impact on confidentiality or integrity. The attack requires local access with low privileges.
Mitigation Recommendations
Red Hat has released security updates for libXpm to address CVE-2026-4367. Users of Red Hat Hardened Images should apply the updated RPMs libXpm-3.5.17-7.2.hum1 or later (including libXpm-3.5.19-4.hum1) as provided in the Red Hat advisories RHSA-2026:30354 and RHSA-2026:47072. Patch status is confirmed by the vendor advisories. No alternative mitigations or workarounds are specified.
CVE-2026-4367: Out-of-bounds Read in Red Hat Red Hat Hardened Images
Description
A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundaries can cause an internal pointer to read beyond the file's end, leading to application crashes and Denial of Service conditions.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in libXpm arises from improper boundary validation in the xpmNextWord() function, allowing a local low-privilege user to trigger an out-of-bounds read by supplying a crafted or very small X PixMap image file. This results in reading beyond the file's end, potentially causing application crashes and denial of service. Red Hat Hardened Images RPMs have been updated to versions libXpm-3.5.17-7.2.hum1 and libXpm-3.5.19-4.hum1 to fix this issue. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with attack vector local, low attack complexity, low privileges required, no user interaction, and impacts availability only.
Potential Impact
Successful exploitation of this vulnerability can cause application crashes and denial of service conditions due to out-of-bounds reads in the libXpm library when processing maliciously crafted XPM image files. There is no impact on confidentiality or integrity. The attack requires local access with low privileges.
Mitigation Recommendations
Red Hat has released security updates for libXpm to address CVE-2026-4367. Users of Red Hat Hardened Images should apply the updated RPMs libXpm-3.5.17-7.2.hum1 or later (including libXpm-3.5.19-4.hum1) as provided in the Red Hat advisories RHSA-2026:30354 and RHSA-2026:47072. Patch status is confirmed by the vendor advisories. No alternative mitigations or workarounds are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-03-18T05:07:45.997Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-4367","vendor":"Red Hat"}]
Threat ID: 6a31965e0b89be688808a368
Added to database: 06/16/2026, 18:30:54 UTC
Last enriched: 07/30/2026, 00:10:16 UTC
Last updated: 08/01/2026, 07:18:00 UTC
Views: 47
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.