41 matches found
Amazon Linux 2023 : libXrender, libXrender-devel (ALAS2023-2026-3178)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3178 advisory. A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. CVE-2026-88807 Tenable has extracted the preceding...
Important: libXrender
Issue Overview: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. CVE-2026-88807 Affected Packages: libXrender Issue Correction: Run dnf update libXrender --releasever 2023.12.20261012 or dnf update...
Important: libXrender
Issue Overview: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. CVE-2026-88807 Affected Packages: libXrender Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...
EulerOS 2.0 SP15 : libXfont2 (EulerOS-SA-2026-3917)
According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...
CVE-2026-94283
An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
AZL-104969 CVE-2026-94286 affecting package libXtst 1.2.4-1
An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...
CVE-2026-94285
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
CVE-2026-94286
An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...
CVE-2026-94286 Out-of-bounds read in libXtst's RECORD reply parser
An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...
CVE-2026-94285
The libX11 library (versions before 1.8.14 ) is susceptible to an out-of-bounds read vulnerability within its byte-oriented codeset parser . This flaw could be exploited by a malicious X server to cause a crash in attached X clients. No information regarding specific exploits or in-the-wild explo...
CVE-2026-94284 Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
CVE-2026-94286: Buffer Over-read
An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...
PT-2026-99820
Name of the Vulnerable Software and Affected Versions libXtst versions prior to 1.2.6 Description An out-of-bounds read occurs in the RECORD reply parser of libXtst. This flaw allows a malicious X server to cause a crash of attached X clients. An out-of-bounds read is a condition where a program...
SUSE CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
SUSE CVE-2026-94283
An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
SUSE CVE-2026-94286
An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...
UBUNTU-CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...
