CVEvulnerability
CVE-2026-109088
6.5 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-27
- Last modified
- 2026-10-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-835
Description
A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/11 gitlab.freedesktop.org