CVE-2026-93544
published 2026-09-24CVE-2026-93544: An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.26%
17.8th percentile
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| x.org | libxi | < 1.8.4 | 1.8.4 |
| x.org | libxi | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
vendor_redhat·2026-09-24·CVSS 6.5
CVE-2026-93544 [MEDIUM] CWE-125 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
A flaw was found in libXi. This out-of-bounds read vulnerability allows a malicious X server to cause a Denial of Service (DoS) against attached client applications. By returning a specially crafted response to an XIQueryDevice request, the server triggers an invalid memory read within the client, leading to an abnormal application crash.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread in
GHSA
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
ghsa_unreviewed·2026-09-24
CVE-2026-93544 [MEDIUM] CWE-125 An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing [fedora-all]
bugzilla·2026-09-24·CVSS 6.5
CVE-2026-93544 [MEDIUM] CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing [fedora-all]
CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
Bugzilla
CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
bugzilla·2026-09-24·CVSS 6.5
CVE-2026-93544 [MEDIUM] CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
CVE-2026-93544 libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
2026-09-24
Published