rpm package
almalinux/libXi-devel
pkg:rpm/almalinux/libXi-devel
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-109090 | Hig | 7.5 | < 1.7.10-4.el8_10 | 1.7.10-4.el8_10 | Oct 27, 2026 | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4. | |
| CVE-2026-109089 | Hig | 7.5 | < 1.7.10-4.el8_10 | 1.7.10-4.el8_10 | Oct 27, 2026 | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. | |
| CVE-2026-93543 | Hig | 7.4 | < 1.8.1-7.el10_2.1 | 1.8.1-7.el10_2.1 | Sep 24, 2026 | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
- affected < 1.7.10-4.el8_10fixed 1.7.10-4.el8_10
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
- affected < 1.7.10-4.el8_10fixed 1.7.10-4.el8_10
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
- affected < 1.8.1-7.el10_2.1fixed 1.8.1-7.el10_2.1
An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.