CVE-2026-93543

Published: Sep 24, 2026Modified: Sep 24, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 4.0

Source: meissner@suse.de (Secondary)

Description

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=e2089ab748828273f916bbffd4e65b506aa50fdc

Source: meissner@suse.de

Timeline

No history available yet.