CVE-2026-94282: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

PT-2026-99813

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during the XI2 enter, leave, and focus cookie conversion process. This flaw allows a malicious X server to cause a crash of an attached X client. Recommendations Update lib...

CVE-2026-94282: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

OPENSUSE-SU-2026:11895-1 libXi-devel-1.8.3-2.1 on GA media

These are all security issues fixed in the libXi-devel-1.8.3-2.1 package on the GA media of openSUSE Tumbleweed...

libXi: Out-of-bounds read in libXi's XQueryDeviceState()

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...

libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...

libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()

A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting i...

libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libXi: libXi-1.8.3-2.1.hum1 aarch64, x8664 libXi-devel-1.8.3-2.1.hum1 aarch64, x8664 libXi-1.8.3-2.1.hum1.src src Security Fixes: libXi: CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-9354...

libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing

A flaw was found in libXi. This out-of-bounds read vulnerability allows a malicious X server to cause a Denial of Service DoS against attached client applications. By returning a specially crafted response to an XIQueryDevice request, the server triggers an invalid memory read within the client,...

CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-94281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

Linux Distros Unpatched Vulnerability : CVE-2026-94282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

Linux Distros Unpatched Vulnerability : CVE-2026-93544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...

Linux Distros Unpatched Vulnerability : CVE-2026-93541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a CVE-2026-93541 Note that Nessus relies on the presence of the packag...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-93545

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...

CVE-2026-93542

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...

CVE-2026-94281

A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting i...