Executive brief
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
Junglewise Threat Intelligence
CVE-2026-93542: An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous ser
CVE-2026-93542 · Severity: medium · CVSS 6.5 · Published 2026-09-24