๐Ÿ” CVE Alert

CVE-2026-93541

MEDIUM 6.5

Out-of-bounds read in libXi's XQueryDeviceState()

CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CWE CWE-125
Vendor x.org
Product libxi
Published Sep 24, 2026
Last Updated Sep 24, 2026
Stay Ahead of the Next One

Get instant alerts for x.org libxi

Be the first to know when new medium vulnerabilities affecting x.org libxi are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

X.org / libXi
0 < 1.8.4

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
gitlab.freedesktop.org: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=7b6fffd13fd3914e0b39f3a4f131913da7f066e7

Credits

AISLE in partnership with Red Hat