← All advisories

High severity7.5NVD Advisory· Published Sep 21, 2026· Updated Sep 22, 2026

CVE-2026-88806

CVE-2026-88806

Description

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Xorg/Libx11llm-fuzzy
Range: <1.8.14
osv-coords6 versions
pkg:rpm/almalinux/libX11 pkg:rpm/almalinux/libX11-common pkg:rpm/almalinux/libX11-devel pkg:rpm/almalinux/libX11-xcb pkg:rpm/opensuse/libX11&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/libX11&distro=openSUSE%20Leap%2016.0
< 1.6.8-10.el8_10+ 5 more
- (no CPE)range: < 1.6.8-10.el8_10
- (no CPE)range: < 1.6.8-10.el8_10
- (no CPE)range: < 1.6.8-10.el8_10
- (no CPE)range: < 1.6.8-10.el8_10
- (no CPE)range: < 1.8.13-2.1
- (no CPE)range: < 1.8.10-160000.4.1

Patches

Vulnerability mechanics

References

1

gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309nvd

News mentions

0

No linked articles in our index yet.