Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-93517

X.Org Server GLX RenderLarge Heap Buffer Overflow

Description

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

x.orgg xorg-x11-server

Default version status: unaffected

  • 0 to < 21.1.25affected

x.org xwayland

Default version status: unaffected

  • 0 to < 24.1.14affected

References