CVE-2026-94281 — Out-of-bounds read in libXi's XListInputDevices() class parsing
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Published: 2026-09-24 · CVSS: 6.5 · CVSS 3.1
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7