See how xpcd compares to other vendors in security performance
Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.