Incorrect Handling of Negative Returns in X.Org xwayland and X Server Products
CVE-2026-109096

5.5MEDIUM

Key Information:

Vendor

X.org

Status
Xwayland
Xorg-x11-server
Vendor
CVE Published:
13 November 2026

What is CVE-2026-109096?

The vulnerability arises from the incorrect handling of negative return values when processing XvPutImage requests via the ddQueryImageAttributes() function in X.Org xwayland and X Server products. This flaw can potentially be exploited by authenticated X clients, leading to a crash of the X server. Updating to the latest versions can mitigate the risk associated with this vulnerability.

Affected Version(s)

xorg-x11-server 0 < 21.1.26

xwayland 0 < 24.1.15

References

https://gitlab.freedesktop.org/xorg/xserver/-/commit/1376...
patch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani <TristanInSec@gmail.com>
.