CVE-2026-94284

A flaw was found in libX11. An out-of-bounds read vulnerability exists in the X Input Method (XIM) trigger-key registration parser. A malicious X server can exploit this flaw by sending specially crafted trigger-key registration data to connected client applications, causing them to crash and resulting in a Denial of Service (DoS).

Last checked: 2026-09-30 15:05 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 12:46 UTC)

References

• NVD: CVE-2026-94284
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-10-22 06:27 UTC