SUSE-SU-2026:24119-1 Security update for libXi

This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState bsc1281605. - CVE-2026-93542: out-of-bounds read in XI2 class parsing via sizeclasses and copyclasses bsc1281606. - CVE-2026-93543: out-of-bounds read in XI2 class parser bsc1281608. -...

DEBIAN-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

AZL-104966 CVE-2026-94282 affecting package libXi 1.8.1-1

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

UBUNTU-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

EUVD-2026-88168

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read exists in libXi 's XI2 enter/leave/focus cookie conversion affecting versions before 1.8.4 . This vulnerability could be exploited by a malicious X server to crash an attached X client. No specific exploit information or direct mitigation details are provided in the documents.

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

PT-2026-99813

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during the XI2 enter, leave, and focus cookie conversion process. This flaw allows a malicious X server to cause a crash of an attached X client. Recommendations Update lib...

libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...

libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

Linux Distros Unpatched Vulnerability : CVE-2026-93544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-93542

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...

DEBIAN-CVE-2026-93543

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

AZL-104066 CVE-2026-93543 affecting package libXi 1.8.1-1

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

AZL-104063 CVE-2026-93542 affecting package libXi 1.8.1-1

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...