Integer Overflow Vulnerability in X.Org Xwayland and X Server by X.Org
CVE-2026-109095

6.9MEDIUM

Key Information:

Vendor

X.org

Status
Xwayland
Xorg-x11-server
Vendor
CVE Published:
13 November 2026

What is CVE-2026-109095?

An integer overflow vulnerability exists in the handling of Xv Image Size by X.Org’s Xwayland and X server. This flaw, present in versions before 24.1.15 of Xwayland and 21.1.26 of the X server, allows authenticated clients to potentially crash the X server or expose sensitive data through improper input validation. It is crucial for administrators to apply the necessary patches provided by the vendor to mitigate the risks associated with this vulnerability.

Affected Version(s)

xorg-x11-server 0 < 21.1.26

xwayland 0 < 24.1.15

References

https://gitlab.freedesktop.org/xorg/xserver/-/commit/99e6...
patch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani <TristanInSec@gmail.com>
.