medium6.5
CVE-2026-94281
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Impact
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Affected products
| Product | Affected versions |
|---|---|
| LibXi | before 1.8.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.