CVE-2016-10164

CVE-2016-10164 describes multiple integer overflows in libXpm versions prior to 3.5.12, affecting x.org libxpm. These flaws, triggered by specially crafted XPM files on 64-bit platforms, can lead to a denial of service or arbitrary code execution via heap-based buffer overflows. Rated as Critical with a CVSS score of 9.8, the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, potentially resulting in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code, and it is not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion with 10 mentions.