A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices() function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting in a Denial of Service (DoS).
Last checked: 2026-09-24 21:23 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-24 17:14 UTC)
Fix evidence last checked: 2026-09-25 22:30 UTC