A denial of service via unsigned underflow in libXpms write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.
Weakness
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Hardened Images | RedHat | libxpm-main-3.5.19-4.hum1 | * |
| Libxpm | Ubuntu | jammy | * |
| Libxpm | Ubuntu | noble | * |
| Libxpm | Ubuntu | resolute | * |