X.org vulnerabilities
47 CVEs and advisories name X.org as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-93536X.Org Server GestureBuildSprite Use-After-Free
- CVE-2026-93524X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
- CVE-2026-93523X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
- CVE-2026-93522X.Org Server Glamor CopyArea Heap Buffer Overflow
- CVE-2026-93521X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
- CVE-2026-93520X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
- CVE-2026-93519X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
- CVE-2026-93518X.Org Server XKB ResizeKeyType Numeric Truncation
- CVE-2026-93517X.Org Server GLX RenderLarge Heap Buffer Overflow
- CVE-2026-93516.Org Server XInput Passive Grab Use-After-Free
- CVE-2026-93515.Org Server Present Extension Use-After-Free
- CVE-2026-88812X.Org Server XKB SetGeometry TextDoodad Double Free
- CVE-2026-109090libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
- CVE-2026-109088libXtst RECORD EnableContext Reply Endless Loop
- CVE-2026-109089libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
- CVE-2026-94287Denial of service via unsigned underflow in libXpm's write path
- CVE-2026-94286Out-of-bounds read in libXtst's RECORD reply parser
- CVE-2026-94285Out-of-bounds read in libX11's byte-oriented codeset parser
- CVE-2026-94284Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
- CVE-2026-94283Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
- CVE-2026-94282Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion
- CVE-2026-94281Out-of-bounds read in libXi's XListInputDevices() class parsing
- CVE-2026-93545Out-of-bounds read in libXi's XListInputDevices()
- CVE-2026-93544Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing
- CVE-2026-93543Out-of-bounds read in libXi's XI2 class parser
- CVE-2026-93542Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()
- CVE-2026-93541Out-of-bounds read in libXi's XQueryDeviceState()
- CVE-2026-88807libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
- CVE-2026-88806libX11 XkbGetMap Reply Heap-based Buffer Overflow
- CVE-2026-56003libXfont2 computeProps Property Buffer Heap Buffer Overflow