A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices() function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting in a Denial of Service (DoS).
Last checked: 2026-09-24 21:23 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-24 17:14 UTC)
Fix evidence last checked: 2026-10-22 06:27 UTC
SUSE Linux Enterprise Server 16
SUSE-SU-2026:24203 · Published 2026-10-08