medium6.5
CVE-2026-93544
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
Impact
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
Affected products
| Product | Affected versions |
|---|---|
| LibXi | before 1.8.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.