Vulnerability in x.org libX11

[ Description ]Official description

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR16 Oct 2026CERTFR-2026-AVI-1333

  Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French

  Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

  CVE-2026-72407CVE-2026-72436CVE-2026-68116+1919 more CVEs
• BSI CERT-Bund27 Sep 2026WID-SEC-2026-3606

  X.Org X11: Multiple vulnerabilities allow denial of service Translated from German

  CVE-2026-94283CVE-2026-94285CVE-2026-94284

[ References ]References

• gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs