Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-43788

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libXpm

Default version status: unaffected

  • 0 to < 3.5.17affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.5.12-11.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.3.4-20.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.5.13-10.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.3.4-28.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

References