CVE-2026-108094

A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wpimagedescriptionv1 resource while an asynchronous ICC file read is still in progress. When the read completes, the composit...

CVE-2026-108094

A use-after-free vulnerability exists in mutter within the Wayland color-management ICC image-description path. A local attacker running a malicious Wayland client can trigger this by destroying a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. Upon comp...