https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-16T17:13:02.606014+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-93545 fkie_cve-2026-93545 2026-10-16T17:13:02.642369+00:00

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

 https://vulnerability.circl.lu/vuln/ghsa-cv3f-68px-4hmv GHSA-cv3f-68px-4hmv 2026-10-16T17:13:02.642466+00:00

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

 https://vulnerability.circl.lu/vuln/oesa-2026-4288 OESA-2026-4288 — libXi security update 2026-10-16T17:13:02.642496+00:00

Affected: openEuler:22.03-LTS-SP4: libXi

libXi is the client-side library for the X Input Extension. Security Fix(es):

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a(CVE-2026-93541)

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.(CVE-2026-93542)

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.(CVE-2026-93543)

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.(CVE-2026-93544)

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.(CVE-2026-93545)

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.(CVE-2026-94281)

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.(CVE-2026-94282)

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11895-1 openSUSE-SU-2026:11895-1 — libXi-devel-1.8.3-2.1 on GA media 2026-10-16T17:13:02.642565+00:00

libXi-devel-1.8.3-2.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:71839 RHSA-2026:71839 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-16T17:13:02.642599+00:00

libXi: Out-of-bounds read in libXi's XQueryDeviceState() libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices() libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()

 https://vulnerability.circl.lu/vuln/suse-su-2026:24119-1 SUSE-SU-2026:24119-1 — Security update for libXi 2026-10-16T17:13:02.642634+00:00

Security update for libXi

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-93545 UBUNTU-CVE-2026-93545 2026-10-16T17:13:02.642653+00:00

Affected: Ubuntu:Pro:16.04:LTS: libxi, Ubuntu:18.04:LTS: libxi, Ubuntu:20.04:LTS: libxi, Ubuntu:22.04:LTS: libxi, Ubuntu:24.04:LTS: libxi, Ubuntu:26.04:LTS: libxi

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.