🔐 CVE Alert

CVE-2026-109095

UNKNOWN 0.0

X.Org Server glamor Xv Image Size Integer Overflow

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.

CWE CWE-190
Vendor x.org
Product xwayland
Published Nov 13, 2026
Stay Ahead of the Next One

Get instant alerts for x.org xwayland

Be the first to know when new unknown vulnerabilities affecting x.org xwayland are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

X.Org / xwayland
0 < 24.1.15
X.Org / xorg-x11-server
0 < 21.1.26

References

NVD ↗ CVE.org ↗ EPSS Data ↗
gitlab.freedesktop.org: https://gitlab.freedesktop.org/xorg/xserver/-/commit/99e647e914d947a791e92253a071955a9703647a

Credits

Tristan Madani <[email protected]>