CVE-2026-121604

A flaw was found in wlroots. An out-of-bounds read vulnerability in the XWayland window manager component allows a local user to cause an information disclosure. By providing an improperly terminated window class property, an attacker can read beyond allocated memory and expose compositor heap da...