Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-93520

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

Description

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

x.org xorg-x11-server

Default version status: unaffected

  • 0 to < 21.1.25affected

x.org xwayland

Default version status: unaffected

  • 0 to < 24.1.14affected

References