CVE-2026-93544

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing PUBLISHED

Description (CNA)

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

Affected (CNA)

Vendor / product	Versions
x.org / libXi	affected 0 before 1.8.4

CWE

CWE-125

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=a88a341135b79f6ed450f481e4a5d6ba502382af

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.