CVE-2026-109088

A flaw was found in libXtst. A malicious X server can send malformed RECORD EnableContext replies to a connected client. When processing these malformed responses, the client enters an infinite loop, resulting in a Denial of Service DoS condition where the application becomes unresponsive...