CVE-2026-94286

Published: Sep 28, 2026Modified: Sep 30, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Exploitability: 2.8 / Impact: 4.2

Source: meissner@suse.de (Secondary)

Description

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

Related CWEs

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10/diffs?commit_id=16023c86070e6af9407330deea3938fcef75815b

Source: meissner@suse.de

Timeline

No history available yet.