MinorCritical vulnerability
CVE-2026-93543 (CVSS 7.4)
NVD · officialPublished Sep 24, 2026Risk 23/100
An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
Technical details
CVSS
7.4
AV:NetworkAC:LowPR:NoneUI:RequiredC:NoneI:NoneA:High
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source