{"id":"CVE-2026-94286","aliases":["ALPINE-CVE-2026-94286","ALSA-2026:91223","ALSA-2026:91294","ALSA-2026:91612","AZL-104969","BELL-CVE-2026-94286","DEBIAN-CVE-2026-94286","EUVD-2026-88178","GHSA-xhgq-6j5j-j427","MGASA-2026-0528","OESA-2026-4325","OESA-2026-4326","OESA-2026-4327","OESA-2026-4328","RHSA-2026:79192","RLSA-2026:91223","RLSA-2026:91294","RLSA-2026:91612","ROOT-OS-DEBIAN-12-CVE-2026-94286","ROOT-OS-DEBIAN-13-CVE-2026-94286","SUSE-SU-2026:24145-1","SUSE-SU-2026:4565-1","SUSE-SU-2026:4566-1","UBUNTU-CVE-2026-94286","USN-8939-1","openSUSE-SU-2026:11897-1","openSUSE-SU-2026:22031-1"],"status":"published","title":"Out-of-bounds read in libXtst's RECORD reply parser","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00202,"percentile":0.10234,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-126"],"published":"2026-09-28T00:00:00Z","modified":"2026-11-06T14:16:31Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"libxtst","fixed_in":["1.2.6-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libXtst","fixed_in":["1.2.3-16.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libXtst-devel","fixed_in":["1.2.3-16.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libXtst","fixed_in":["1.2.3-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libXtst-devel","fixed_in":["1.2.3-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libXtst","fixed_in":["1.2.4-8.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libXtst-devel","fixed_in":["1.2.4-8.el10_2.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libXtst","fixed_in":["1.2.6-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxtst","fixed_in":["1.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libxtst","fixed_in":["1.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxtst","fixed_in":["1.2.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxtst","fixed_in":["2:1.2.6-1"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"libxtst","fixed_in":["1.2.5-2.1.mga10"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libXtst","fixed_in":["1.2.4-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libXtst","fixed_in":["1.2.4-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libXtst","fixed_in":["1.2.4-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"libXtst","fixed_in":["1.2.4-3.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libXtst","fixed_in":["0:1.2.5-5.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libXtst-devel","fixed_in":["0:1.2.5-5.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libXtst","fixed_in":["0:1.2.3-16.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libXtst","fixed_in":["0:1.2.3-8.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"libXtst","fixed_in":["0:1.2.4-8.el10_2.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libxtst","fixed_in":["2:1.2.3-1.1.aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libxtst","fixed_in":["2:1.2.3-1.1.aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"libxtst","fixed_in":["2:1.2.5-1.aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-libxtst","fixed_in":["2:1.2.5-1.aikido.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libXtst","fixed_in":["1.2.5-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libXtst","fixed_in":["1.2.5-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libXtst","fixed_in":["1.2.2-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libXtst","fixed_in":["1.2.2-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libXtst","fixed_in":["1.2.3-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxtst","fixed_in":["2:1.2.2-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxtst","fixed_in":["2:1.2.3-1ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxtst","fixed_in":["2:1.2.3-1ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxtst","fixed_in":["2:1.2.3-1ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxtst","fixed_in":["2:1.2.3-1.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"libxtst","fixed_in":["2:1.2.5-1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libxtst","fixed_in":["2:1.2.5-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libXtst","fixed_in":["1.2.5-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"libXtst","fixed_in":["1.2.5-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-16.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libXtst-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-16.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libXtst-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-8.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libXtst-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-8.el10_2.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.4-r0"},{"fixed":"1.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.5-r0"},{"fixed":"1.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.4-r0"},{"fixed":"1.2.6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.2.3-1.1","2:1.2.5-1","2:1.2.6-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.2.5-1","2:1.2.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.6-1"}]}],"versions":["2:1.2.5-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.1.mga10"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-3.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-5.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libXtst-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-5.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-16.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-8.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-8.el10_2.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1.1.aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1.1.aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1.aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1.aikido.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.2-1ubuntu0.1~esm1"}]}],"versions":["2:1.2.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.18.04.1~esm1"}]}],"versions":["2:1.2.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.20.04.1~esm1"}]}],"versions":["2:1.2.3-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.22.04.1"}]}],"versions":["2:1.2.3-1build2","2:1.2.3-1build3","2:1.2.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1.1ubuntu0.1"}]}],"versions":["2:1.2.3-1.1","2:1.2.3-1.1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1ubuntu1"}]}],"versions":["2:1.2.5-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1ubuntu0.1"}]}],"versions":["2:1.2.5-1","2:1.2.5-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.2-1ubuntu0.1~esm1"}]}],"versions":["2:1.2.2-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.18.04.1~esm1"}]}],"versions":["2:1.2.3-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.20.04.1~esm1"}]}],"versions":["2:1.2.3-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.22.04.1"}]}],"versions":["2:1.2.3-1build2","2:1.2.3-1build3","2:1.2.3-1build4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1.1ubuntu0.1"}]}],"versions":["2:1.2.3-1.1","2:1.2.3-1.1build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1ubuntu1"}]}],"versions":["2:1.2.5-1build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.5-1ubuntu0.1"}]}],"versions":["2:1.2.5-1","2:1.2.5-1build1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-160000.4.1"}]}]}],"products":[{"vendor":"x.org","product":"libxtst"}],"references":[{"url":"https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10/diffs?commit_id=16023c86070e6af9407330deea3938fcef75815b","tags":["patch","fix","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94286","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-xhgq-6j5j-j427"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-94286","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91223","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-94286","tags":["report"]},{"url":"https://bugzilla.redhat.com/2542377","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-91223.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91294","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-91294.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91612","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-91612.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-94286","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94286.json","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxtst","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-94286","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0528.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36451","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QZFYBLNVDL6SO35IRJEHPL6F5QAKZ6GB/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4325","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4326","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4327","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4328","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79192","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79192.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542377","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-94286","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:91223","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:91294","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:91612","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624145-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281665","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94286","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264565-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264566-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-94286","tags":["report"]},{"url":"https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8939-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-7951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7952","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-94286","title":"Out-of-bounds read in libXtst's RECORD reply parser","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T08:50:35.9Z","modified":"2026-09-30T13:02:00.302Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:19:53.786088Z"}],"euvd":[{"id":"EUVD-2026-88178","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T08:50:35Z","modified":"2026-09-30T13:02:00Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:50.183381Z"}],"ghsa":[{"id":"GHSA-xhgq-6j5j-j427","title":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by...","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:30:31Z","modified":"2026-09-28T09:30:40Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:12:32.013867Z"}],"nvd":[{"id":"CVE-2026-94286","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:17:08.463Z","modified":"2026-09-30T13:17:26.71Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:12:52.081323Z"}],"osv":[{"id":"ALPINE-CVE-2026-94286","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:17:08.463Z","modified":"2026-10-18T10:30:03.287087581Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BELL-CVE-2026-94286","status":"published","published":"2026-09-29T06:05:58.879166Z","modified":"2026-11-04T07:16:54.390605782Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T07:31:17.355361Z"},{"id":"CVE-2026-94286","title":"Out-of-bounds read in libXtst's RECORD reply parser","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T08:50:35.9Z","modified":"2026-10-29T22:57:03.15496979Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:45:20.931171Z"},{"id":"DEBIAN-CVE-2026-94286","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:17:08.463Z","modified":"2026-11-01T05:00:07.861246912Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:07.324252Z"},{"id":"OESA-2026-4325","title":"libXtst security update","description":"X.Org X11 libXtst runtime library\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read in libXtst\u0026apos;s RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.(CVE-2026-94286)","status":"published","published":"2026-10-16T11:59:23Z","modified":"2026-10-16T12:15:09.983556433Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4326","title":"libXtst security update","description":"X.Org X11 libXtst runtime library\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read in libXtst\u0026apos;s RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.(CVE-2026-94286)","status":"published","published":"2026-10-16T11:59:23Z","modified":"2026-10-16T12:15:09.88519763Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4327","title":"libXtst security update","description":"X.Org X11 libXtst runtime library\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read in libXtst\u0026apos;s RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.(CVE-2026-94286)","status":"published","published":"2026-10-16T11:59:24Z","modified":"2026-10-16T12:15:09.071790689Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4328","title":"libXtst security update","description":"X.Org X11 libXtst runtime library\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read in libXtst\u0026apos;s RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.(CVE-2026-94286)","status":"published","published":"2026-10-16T11:59:24Z","modified":"2026-10-16T12:15:09.877316014Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:79192","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-10-10T10:22:47Z","modified":"2026-10-10T10:35:25.156600929Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:91223","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library\n\nSecurity Fix(es):\n\n* libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-30T12:04:27.805649Z","modified":"2026-10-30T12:30:02.534991811Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:91294","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library\n\nSecurity Fix(es):\n\n* libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-29T12:01:16.697685Z","modified":"2026-10-29T12:30:04.191034466Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:91612","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library\n\nSecurity Fix(es):\n\n* libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-29T12:08:23.381701Z","modified":"2026-10-29T12:30:04.041862043Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-94286","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:17:00Z","modified":"2026-10-20T16:50:28.833881464Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:44.071534Z"},{"id":"ALSA-2026:91223","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library  \n\nSecurity Fix(es):  \n\n  * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T22:45:02.305372024Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:91294","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library  \n\nSecurity Fix(es):  \n\n  * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T11:02:29.831043283Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:91612","title":"Important: libXtst security update","description":"X.Org X11 libXtst runtime library  \n\nSecurity Fix(es):  \n\n  * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-28T00:00:00Z","modified":"2026-10-29T11:31:10.538556462Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-104969","title":"CVE-2026-94286 affecting package libXtst for versions less than 1.2.6-1","description":"An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.","status":"published","published":"2026-09-28T09:17:08Z","modified":"2026-11-06T14:16:31.576577152Z","updated_at":"2026-11-06T14:57:15.495576Z"},{"id":"MGASA-2026-0528","title":"Updated libxtst package fixes a security vulnerability","description":"Out-of-bounds read in libXtst's RECORD reply parser. (CVE-2026-94286)\n","status":"published","published":"2026-10-20T02:38:36Z","modified":"2026-10-20T02:43:22.953639687Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11897-1","title":"libXtst-devel-1.2.5-2.1 on GA media","description":"These are all security issues fixed in the libXtst-devel-1.2.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-28T00:00:00Z","modified":"2026-09-29T18:23:22.609261048Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22031-1","title":"Security update for libXtst","description":"This update for libXtst fixes the following issue:\n\n- CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).\n","status":"published","published":"2026-10-06T12:59:19Z","modified":"2026-10-09T17:23:14.424303412Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-94286","title":"CVE-2026-94286 in libxtst - Patched by Root","description":"Root has patched CVE-2026-94286 in the libxtst package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-07T08:39:04Z","modified":"2026-10-07T09:15:05.770148163Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-94286","title":"CVE-2026-94286 in libxtst - Patched by Root","description":"Root has patched CVE-2026-94286 in the libxtst package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-10-06T11:36:19Z","modified":"2026-10-06T12:15:06.206047798Z","updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"SUSE-SU-2026:24145-1","title":"Security update for libXtst","description":"This update for libXtst fixes the following issue:\n\n- CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).\n","status":"published","published":"2026-10-06T12:59:18Z","modified":"2026-10-16T17:23:10.612159881Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4565-1","title":"Security update for libXtst","description":"This update for libXtst fixes the following issue:\n\n- CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).\n","status":"published","published":"2026-10-07T15:19:58Z","modified":"2026-10-08T19:15:04.832069981Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4566-1","title":"Security update for libXtst","description":"This update for libXtst fixes the following issue:\n\n- CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).\n","status":"published","published":"2026-10-07T15:22:53Z","modified":"2026-10-08T19:15:03.980056024Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8939-1","title":"libxtst vulnerabilities","description":"It was discovered that libXtst did not properly handle certain RECORD\nreplies from the X server. A malicious X server could possibly use this\nissue to cause libXtst clients to crash, resulting in a denial of service.\n(CVE-2026-94286)\n\nTobias Stoeckmann discovered that libXtst did not properly handle certain\nmemory operations. A malicious X server could possibly use this issue to\ncause libXtst to access memory out of bounds, resulting in a denial of\nservice. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7951)\n\nTobias Stoeckmann discovered that libXtst did not properly handle certain\nreplies from the X server. A malicious X server could possibly use this\nissue to cause libXtst to enter an infinite loop, resulting in a denial of\nservice. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7952)","status":"published","published":"2026-10-19T17:17:18Z","modified":"2026-10-20T17:02:24.967861182Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}