ROOT-OS-DEBIAN-12-CVE-2026-93543 CVE-2026-93543 in libxi - Patched by Root

Root has patched CVE-2026-93543 in the libxi package for Root:Debian:12. Multiple fixed versions available...

AZL-104966 CVE-2026-94282 affecting package libXi 1.8.1-1

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

DEBIAN-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

EUVD-2026-88168

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read exists in libXi 's XI2 enter/leave/focus cookie conversion affecting versions before 1.8.4 . This vulnerability could be exploited by a malicious X server to crash an attached X client. No specific exploit information or direct mitigation details are provided in the documents.

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282: Out-of-bounds Read

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

OPENSUSE-SU-2026:11895-1 libXi-devel-1.8.3-2.1 on GA media

These are all security issues fixed in the libXi-devel-1.8.3-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-99813

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during the XI2 enter, leave, and focus cookie conversion process. This flaw allows a malicious X server to cause a crash of an attached X client. Recommendations Update lib...

libXi: Out-of-bounds read in libXi's XQueryDeviceState()

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing

A flaw was found in libXi. This out-of-bounds read vulnerability allows a malicious X server to cause a Denial of Service DoS against attached client applications. By returning a specially crafted response to an XIQueryDevice request, the server triggers an invalid memory read within the client,...

libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()

A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting i...

libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libXi: libXi-1.8.3-2.1.hum1 aarch64, x8664 libXi-devel-1.8.3-2.1.hum1 aarch64, x8664 libXi-1.8.3-2.1.hum1.src src Security Fixes: libXi: CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-9354...

libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...

CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...