CVE-2026-109903

A buffer overread vulnerability exists in the X.Org X Server (prior to version 21.1.26) and xwayland (prior to version 24.1.15) within the XvQueryImageAttributes function. The flaw is caused by casting a negative integer to CARD32 , which allows authenticated X clients to trigger crashes . Remedi...