Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2026-109090

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-109089

libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-94282

Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Libxi X.org
Products
Libxi Libxi
CVE-2026-93541

Out-of-bounds read in libXi's XQueryDeviceState()

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93545

Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93542

Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93543

Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93544

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-94281

Out-of-bounds read in libXi's XListInputDevices() class parsing

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2016-7946

libXi: Insufficient validation of server responses result in various data mishandlings

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxi
CVE-2016-7945

libXi: Insufficient validation of server responses result in Integer overflows

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxi
CVE-2013-1984

libXi: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxi
CVE-2013-1998

libXi: Multiple Array Index error leading to heap-based OOB write

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

CVSS 2.0 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxi
CVE-2013-1995

libXi: Sign extension issues resulting in heap-based buffer overflow

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxi