libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processing

A flaw was found in libXi. A malicious or compromised X server can trigger a client-side Denial of Service DoS or limited information disclosure by sending crafted event messages. When processing X Input Extension XI2 enter, leave, or focus events, the library does not validate that the reported...

libXi -- multiple vulnerabilities

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for. CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via sizeclasses...

[slackware-security] libXi

New libXi packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXi-1.8.4-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Out-of-bounds read in libXi's XQueryDeviceState...

SUSE-SU-2026:24119-1 Security update for libXi

This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState bsc1281605. - CVE-2026-93542: out-of-bounds read in XI2 class parsing via sizeclasses and copyclasses bsc1281606. - CVE-2026-93543: out-of-bounds read in XI2 class parser bsc1281608. -...

ROOT-OS-DEBIAN-12-CVE-2026-93543 CVE-2026-93543 in libxi - Patched by Root

Root has patched CVE-2026-93543 in the libxi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-93543 CVE-2026-93543 in libxi - Patched by Root

Root has patched CVE-2026-93543 in the libxi package for Root:Debian:13. Multiple fixed versions available...

libXi-devel-1.8.3-2.1 on GA media (moderate)

libXi-devel-1.8.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11895-1 Rating: moderate Cross-References: CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 CVSS scores: CVE-2026-93541 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

AZL-104966 CVE-2026-94282 affecting package libXi 1.8.1-1

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

DEBIAN-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

UBUNTU-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read exists in libXi 's XI2 enter/leave/focus cookie conversion affecting versions before 1.8.4 . This vulnerability could be exploited by a malicious X server to crash an attached X client. No specific exploit information or direct mitigation details are provided in the documents.

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

EUVD-2026-88168

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282 Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...