{"id":"CVE-2026-109090","aliases":["ALPINE-CVE-2026-109090","ALSA-2026:93438","ALSA-2026:93439","ALSA-2026:93441","AZL-111169","BELL-CVE-2026-109090","DEBIAN-CVE-2026-109090","EUVD-2026-111111","GHSA-5h6f-wh6v-848r","MGASA-2026-0543","OESA-2026-4504","OESA-2026-4609","OESA-2026-4610","OESA-2026-4611","RLSA-2026:93438","RLSA-2026:93439","RLSA-2026:93441","RLSA-2026:98504","SUSE-SU-2026:24366-1","SUSE-SU-2026:5165-1","SUSE-SU-2026:5166-1","UBUNTU-CVE-2026-109090","openSUSE-SU-2026:12154-1"],"status":"published","title":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00258,"percentile":0.17652,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-10-16T00:00:00Z","modified":"2026-11-12T00:30:02Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"libxi","fixed_in":["1.8.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libXi","fixed_in":["1.8.4-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxi","fixed_in":["1.8.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libxi","fixed_in":["1.8.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxi","fixed_in":["1.8.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxi","fixed_in":["2:1.8.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-4.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-4.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-8.el9_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-8.el9_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-7.el10_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libXi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-7.el10_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8-r0"},{"fixed":"1.8.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-r0"},{"fixed":"1.8.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8-r0"},{"fixed":"1.8.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.8-1","2:1.8-1+hurd.1","2:1.8.1-1","2:1.8.2-1","2:1.8.2-2","2:1.8.3-1","2:1.8.4-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.8.2-1","2:1.8.2-2","2:1.8.3-1","2:1.8.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.8.4-1"}]}],"versions":["2:1.8.2-1","2:1.8.2-2","2:1.8.3-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.2.mga10"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:10","package":"libxrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-2.1.mga10"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:10","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-2.2.mga10"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-5.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-6.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-6.oe2403sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-6.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.10-4.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.10-8.el9_8.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.el10_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.10-8.el9_8.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-159998.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-150000.3.7.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-18.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-18.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.7.4-1","2:1.7.5-1","2:1.7.6-1","2:1.7.6-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.7.9-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.7.10-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.7.10-1build2","2:1.7.10-1build3","2:1.8-1","2:1.8-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.8-1build1","2:1.8.1-1","2:1.8.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.8.2-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.8.2-1","2:1.8.2-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-3.1"}]}],"bundled":2}],"products":[{"vendor":"x.org","product":"libxi"}],"references":[{"url":"https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6","tags":["patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109090","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5h6f-wh6v-848r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-109090","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109089","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109090","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-93438.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93439","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-93439.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93441","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-93441.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-109090","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109090.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-109090","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0543.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36533","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/10/16/37","tags":["web"]},{"url":"https://lists.x.org/archives/xorg-announce/2026-October/thread.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4504","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109089","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4609","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4610","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4611","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:93438","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562191","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:93439","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:93441","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:98504","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540529","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:98504","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624366-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281605","tags":["report"]},{"url":"https://bugzilla.suse.com/1281606","tags":["report"]},{"url":"https://bugzilla.suse.com/1281608","tags":["report"]},{"url":"https://bugzilla.suse.com/1281609","tags":["report"]},{"url":"https://bugzilla.suse.com/1281612","tags":["report"]},{"url":"https://bugzilla.suse.com/1281615","tags":["report"]},{"url":"https://bugzilla.suse.com/1281651","tags":["report"]},{"url":"https://bugzilla.suse.com/1285084","tags":["report"]},{"url":"https://bugzilla.suse.com/1285085","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94282","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265165-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265166-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-109090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109090","tags":["report"]},{"url":"https://lists.x.org/archives/xorg-announce/2026-October/003752.html","tags":["report"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/26","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-109090","title":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T16:32:56.867Z","modified":"2026-11-04T20:24:18.063Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-04T21:42:21.553972Z"}],"euvd":[{"id":"EUVD-2026-111111","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T16:32:56Z","modified":"2026-11-04T20:24:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T21:45:43.843698Z"}],"ghsa":[{"id":"GHSA-5h6f-wh6v-848r","title":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when...","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T18:31:42Z","modified":"2026-10-27T18:31:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:14:30.732607Z"}],"nvd":[{"id":"CVE-2026-109090","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T17:16:57.93Z","modified":"2026-11-04T21:17:47.743Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-04T23:43:42.179273Z"}],"osv":[{"id":"ALPINE-CVE-2026-109090","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T17:16:57.93Z","modified":"2026-10-28T10:30:02.354241975Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-109090","status":"published","published":"2026-10-23T13:11:18.971668Z","modified":"2026-11-04T07:15:58.605077529Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T07:31:49.594962Z"},{"id":"CVE-2026-109090","title":"libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T16:32:56.867Z","modified":"2026-11-11T13:12:16.280633762Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-10T21:13:26.339973Z"},{"id":"DEBIAN-CVE-2026-109090","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T17:16:57.93Z","modified":"2026-11-05T09:47:33.91418245Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2026-4504","title":"libXi security update","description":"libXi is the client-side library for the X Input Extension.\r\n\r\nSecurity Fix(es):\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)","status":"published","published":"2026-10-22T14:35:55Z","modified":"2026-10-22T14:45:10.482714323Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4609","title":"libXi security update","description":"libXi is the client-side library for the X Input Extension.\r\n\r\nSecurity Fix(es):\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)","status":"published","published":"2026-10-29T09:03:32Z","modified":"2026-10-29T09:15:39.422278449Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4610","title":"libXi security update","description":"libXi is the client-side library for the X Input Extension.\r\n\r\nSecurity Fix(es):\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)","status":"published","published":"2026-10-29T09:03:33Z","modified":"2026-10-29T09:15:39.42291263Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4611","title":"libXi security update","description":"libXi is the client-side library for the X Input Extension.\r\n\r\nSecurity Fix(es):\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)\n\nX.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)","status":"published","published":"2026-10-29T09:03:33Z","modified":"2026-10-29T09:15:38.711534954Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RLSA-2026:93438","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library\n\nSecurity Fix(es):\n\n* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n\n* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-03T12:01:33.643841Z","modified":"2026-11-03T12:30:02.49647317Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T13:02:16.068655Z"},{"id":"RLSA-2026:93439","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library\n\nSecurity Fix(es):\n\n* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n\n* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-03T12:05:01.276494Z","modified":"2026-11-03T12:30:02.498119893Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T13:02:16.068655Z"},{"id":"RLSA-2026:93441","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library\n\nSecurity Fix(es):\n\n* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n\n* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-03T12:10:03.560067Z","modified":"2026-11-03T12:30:03.479841065Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T13:02:16.068655Z"},{"id":"RLSA-2026:98504","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library\n\nSecurity Fix(es):\n\n* libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543)\n\n* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n\n* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-12T00:04:12.119552Z","modified":"2026-11-12T00:30:02.532621685Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-12T00:54:50.801358Z"},{"id":"UBUNTU-CVE-2026-109090","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T17:16:00Z","modified":"2026-10-28T20:16:20.272711315Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:59.130573Z"},{"id":"ALSA-2026:93438","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library  \n\nSecurity Fix(es):  \n\n  * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n  * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-02T00:00:00Z","modified":"2026-11-02T23:00:02.53730478Z","updated_at":"2026-11-03T00:03:07.015763Z"},{"id":"ALSA-2026:93439","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library  \n\nSecurity Fix(es):  \n\n  * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n  * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-02T00:00:00Z","modified":"2026-11-03T11:30:02.381639436Z","updated_at":"2026-11-03T12:01:03.515104Z"},{"id":"ALSA-2026:93441","title":"Important: libXi security update","description":"X.Org X11 libXi runtime library  \n\nSecurity Fix(es):  \n\n  * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)\n  * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-02T00:00:00Z","modified":"2026-11-02T23:15:02.366334624Z","updated_at":"2026-11-03T00:02:57.75152Z"},{"id":"AZL-111169","title":"CVE-2026-109090 affecting package libXi for versions less than 1.8.4-1","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.","status":"published","published":"2026-10-27T17:16:57Z","modified":"2026-11-05T07:22:58Z","updated_at":"2026-11-05T16:41:18.705965Z"},{"id":"MGASA-2026-0543","title":"Updated libxtst, libxrender, libxi packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nlibXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.\n(CVE-2026-109089)\nlibXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.\n(CVE-2026-109090)\nOut-of-bounds read in libXrender's XRenderQueryFormat reply parser.\n(CVE-2026-88807)\nlibXtst RECORD EnableContext Reply Endless Loop. (CVE-2026-109088)\n","status":"published","published":"2026-10-26T15:28:20Z","modified":"2026-10-26T15:43:21.640113348Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:12154-1","title":"libXi-devel-1.8.3-3.1 on GA media","description":"These are all security issues fixed in the libXi-devel-1.8.3-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-16T00:00:00Z","modified":"2026-10-17T10:00:04.11824415Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:24366-1","title":"Security update for libXi","description":"This update for libXi fixes the following issues:\n\n- CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605).\n- CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606).\n- CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608).\n- CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609).\n- CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612).\n- CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615).\n- CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion (bsc#1281651).\n- CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084).\n- CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085).\n","status":"published","published":"2026-10-20T10:02:46Z","modified":"2026-10-27T17:23:18.814839477Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:5165-1","title":"Security update for libXi","description":"This update for libXi fixes the following issues:\n\n- CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605).\n- CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606).\n- CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608).\n- CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609).\n- CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612).\n- CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615).\n- CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651).\n- CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084).\n- CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085).\n","status":"published","published":"2026-11-10T12:01:01Z","modified":"2026-11-10T20:30:03.942076869Z","updated_at":"2026-11-10T20:43:04.310349Z"},{"id":"SUSE-SU-2026:5166-1","title":"Security update for libXi","description":"This update for libXi fixes the following issues:\n\n- CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605).\n- CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606).\n- CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608).\n- CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609).\n- CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612).\n- CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615).\n- CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651).\n- CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084).\n- CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085).\n","status":"published","published":"2026-11-10T14:04:08Z","modified":"2026-11-11T13:00:04.393951949Z","updated_at":"2026-11-11T13:08:46.301371Z"}]}}