CVE-2026-109091

X.Org Server EDID DSRANGES Out-Of-Bounds Write...

CVE-2026-109091

The X.Org X server Xorg records EDID Display-Range DSRANGES descriptors into the fixed-size MonRec hsync/vrefresh arrays without checking MAXHSYNC/MAXVREFRESH. A malicious monitor or crafted EDID can overrun those arrays out-of-bounds write. Fixed in xorg-server 21.1.26 X.Org Security Advisory,...