CVE-2026-93542
published 2026-09-24CVE-2026-93542: An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X…
PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.26%
17.8th percentile
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| x.org | libxi | < 1.8.4 | 1.8.4 |
| x.org | libxi | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
vendor_redhat·2026-09-24·CVSS 6.5
CVE-2026-93542 [MEDIUM] CWE-125 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension (XI2) device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read beyond memory boundaries and crash, resulting in a Denial of Service (DoS).
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and d
GHSA
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
ghsa_unreviewed·2026-09-24
CVE-2026-93542 [MEDIUM] CWE-125 An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
bugzilla·2026-09-24·CVSS 6.5
CVE-2026-93542 [MEDIUM] CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
Bugzilla
CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing [fedora-all]
bugzilla·2026-09-24·CVSS 6.5
CVE-2026-93542 [MEDIUM] CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing [fedora-all]
CVE-2026-93542 libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
2026-09-24
Published