X.Org Libxi vulnerabilities

CVE-2026-109089 [HIGH] CWE-122 CVE-2026-109089: A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, trigg A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVE-2026-109090 [HIGH] CWE-122 CVE-2026-109090: A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when proce A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVE-2016-7945 [HIGH] CWE-125 CVE-2016-7945: Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of s Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.

CVE-2016-7946 [HIGH] CWE-284 CVE-2016-7946: X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via ve X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.

CVE-2013-1998 [MEDIUM] CWE-119 CVE-2013-1998: Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of serv Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

CVE-2026-93543 [HIGH] CWE-125 CVE-2026-93543: An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVE-2013-1984 [MEDIUM] CWE-189 CVE-2013-1984: Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and

CVE-2013-1995 [MEDIUM] CWE-119 CVE-2013-1995: X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a bu X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

CVE-2026-93544 [MEDIUM] CWE-125 CVE-2026-93544: An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used b An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

CVE-2026-93542 [MEDIUM] CWE-125 CVE-2026-93542: An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi be An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

CVE-2026-94281 [MEDIUM] CWE-125 CVE-2026-94281: An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be us An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVE-2026-93541 [MEDIUM] CWE-125 CVE-2026-93541: An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVE-2026-93545 [MEDIUM] CWE-125 CVE-2026-93545: An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by maliciou An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVE-2026-94282 [MEDIUM] CWE-125 CVE-2026-94282: An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.