🔐 CVE Alert

CVE-2026-93517

UNKNOWN 0.0

X.Org Server GLX RenderLarge Heap Buffer Overflow

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.

CWE CWE-122
Vendor x.orgg
Product xorg-x11-server
Published Oct 28, 2026
Stay Ahead of the Next One

Get instant alerts for x.orgg xorg-x11-server

Be the first to know when new unknown vulnerabilities affecting x.orgg xorg-x11-server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

x.orgg / xorg-x11-server
0 < 21.1.25
x.org / xwayland
0 < 24.1.14

References

NVD ↗ CVE.org ↗ EPSS Data ↗
gitlab.freedesktop.org: https://gitlab.freedesktop.org/xorg/xserver/-/commit/2abe4632d793314d3d5f28c19583fb76019f5ce4

Credits

Anonymous working with TrendAI Zero Day Initiative