CVE-2026-93541
published 2026-09-24CVE-2026-93541: An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
PriorityP428medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.26%
17.8th percentile
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| x.org | libxi | < 1.8.4 | 1.8.4 |
| x.org | libxi | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libXi: Out-of-bounds read in libXi's XQueryDeviceState()
vendor_redhat·2026-09-24·CVSS 6.5
CVE-2026-93541 [MEDIUM] CWE-125 libXi: Out-of-bounds read in libXi's XQueryDeviceState()
libXi: Out-of-bounds read in libXi's XQueryDeviceState()
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState() function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated buffer boundaries, resulting in a Denial of Service (DoS).
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Package: libXi (Red Hat Enterprise Linu
GHSA
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
ghsa_unreviewed·2026-09-24
CVE-2026-93541 [MEDIUM] CWE-125 An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState() [fedora-all]
bugzilla·2026-09-25·CVSS 6.5
CVE-2026-93541 [MEDIUM] CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState() [fedora-all]
CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
Bugzilla
CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState()
bugzilla·2026-09-24·CVSS 6.5
CVE-2026-93541 [MEDIUM] CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState()
CVE-2026-93541 libXi: Out-of-bounds read in libXi's XQueryDeviceState()
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
2026-09-24
Published