CVE-2026-93545

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Score

CVSS 3.1 6.5 Medium

Status

Awaiting Analysis - meissner@suse.de

Published

2026-09-24

Last modified

2026-09-24

Weaknesses

CWE-125

Affected products

• Libxi (X.org)

References

• https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=234ce17d95c42d75f7f7fdb2bf7a24875451b…