An Out-of-Bounds Read vulnerability exists in the xpmNextWord() function of the libXpm library. The issue is caused by improper validation of file boundaries when parsing XPM image data. When a specially crafted or very small XPM file is processed, the internal pointer may advance beyond the actual end of the file, resulting in an out-of-bounds memory read. This can lead to application crashes and denial-of-service conditions in applications that rely on libXpm. The vulnerability requires local access and low privileges, and does not impact confidentiality or integrity.