CVE-2026-109090

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...