CVE-2026-94282 — Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion
An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.
Published: 2026-09-28 · CVSS: 5.6 · CVSS 3.1
An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7