X.org libXi vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting X.org libXi: 7 record(s), with affected versions and fixes.
CVE-2026-94282
Medium · 5.6
CWE-125 Sep 28, 2026
Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion
An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.
CVE-2026-94281
Medium · 6.5
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XListInputDevices() class parsing
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-93545
Medium · 6.5
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XListInputDevices()
An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-93544
Medium · 6.5
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
CVE-2026-93543
High · 7.4
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XI2 class parser
An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-93542
Medium · 6.5
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
CVE-2026-93541
Medium · 6.5
CWE-125 Sep 24, 2026
Out-of-bounds read in libXi's XQueryDeviceState()
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a