Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-93523

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

Description

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

x.org xorg-x11-server

Default version status: unaffected

  • 0 to < 21.1.25affected

x.org xwayland

Default version status: unaffected

  • 0 to < 24.1.14affected

References