CVE-2026-93523

A heap buffer overflow vulnerability exists in X.Org X Server (versions before 21.1.15) and XWayland (versions before 24.1.14) within the XInput2 component. The flaw is triggered by a XIPassiveUngrabDevice request containing an unvalidated, out-of-range modifier value, leading to an out-of-bounds...