CVE-2026-93543: An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVE-2026-93543 · Severity: high · CVSS 7.4 · Published 2026-09-24

Executive brief

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.