Buffer Overflow Vulnerability in libXi Affects X.Org Foundation
CVE-2026-109089

7.5HIGH

Key Information:

Vendor

X.org

Status
Libxi
Vendor
CVE Published:
27 October 2026

What is CVE-2026-109089?

A buffer overflow vulnerability exists in the libXi library, specifically occurring when handling DEVICE_RESOLUTION. This security flaw can be exploited by a malicious X server to overflow the heap, potentially compromising system integrity. Users of libXi prior to version 1.8.4 are at risk and should consider upgrading to the latest version to mitigate the threat. For further details, refer to the patch documentation provided by the X.Org Foundation.

Affected Version(s)

libXi 0 < 1.8.4

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7...
patch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adam Bedard
.