← All advisories

High severityNVD Advisory· Published Sep 21, 2026· Updated Sep 22, 2026

CVE-2026-88807

CVE-2026-88807

Description

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Xorg/Libxrenderllm-fuzzy
Range: <0.9.13
osv-coords4 versions
pkg:rpm/almalinux/libXrender pkg:rpm/almalinux/libXrender-devel pkg:rpm/opensuse/libXrender&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/libXrender&distro=openSUSE%20Tumbleweed
< 0.9.11-8.el10_2.1+ 3 more
- (no CPE)range: < 0.9.11-8.el10_2.1
- (no CPE)range: < 0.9.11-8.el10_2.1
- (no CPE)range: < 0.9.11-160000.3.1
- (no CPE)range: < 0.9.12-2.1

Patches

Vulnerability mechanics

References

1

gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19nvd

News mentions

0

No linked articles in our index yet.