Is CVE-2026-94287 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-94287?

CVE-2026-94287 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-94287

Description

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.