CVE-2026-109089High· 7.5▾ TwilightA buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
libXi < 1.8.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109090High· 7.5libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
CVE-2026-93522High· 7.8X.Org Server Glamor CopyArea Heap Buffer Overflow
CVE-2026-93523High· 7.8X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
CVE-2026-93536Medium· 5.3X.Org Server GestureBuildSprite Use-After-Free
CVE-2026-93520High· 7.8X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
CVE-2026-93521High· 7.8X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow