CVE-2026-4367 | X.org libXpm up to 3.5.4 xpmNextWord out-of-bounds (5448e1bd / Nessus ID 314592)

A vulnerability identified as problematic has been detected in X.org libXpm up to 3.5.4. The affected element is the function xpmNextWord. The manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-4367. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.