A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service (DoS) by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure.
Last checked: 2026-09-30 15:05 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 12:58 UTC)
Fix evidence last checked: 2026-09-29 07:58 UTC