CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-94283

Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

Status: Published
Published: 2026-09-28
Updated: 2026-09-30
Assigning organization: suse

Description

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

x.org libX11

Default version status: unaffected

0 to < 1.8.14affected

References

https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit_id=42d0303f243002a9856c76060569a61893c670dd ↗