CVE-2026-94285

A flaw was found in libX11. An out-of-bounds read vulnerability in the byte-oriented codeset parser allows a malicious X Window System server to cause a Denial of Service (DoS) by crashing connected client applications. This issue may also allow the server to access limited memory contents from the client.

Last checked: 2026-09-30 15:05 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 12:52 UTC)

References

• NVD: CVE-2026-94285
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-10-22 06:27 UTC