AZL-111482: CVE-2026-93517 affecting package wayland 1.22.0-1
Published Oct 28, 2026
·Updated
A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.
Affected Software
1 affected component
azure-linux/wayland<=1.22.0-1
Event History
Oct 28, 2026
Advisory Published
via OSV·02:17 PM
Data Sourced
via OSV·02:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires an authenticated X client. The impact occurs in the X server context, so systems running an affected X.org X server or XWayland are the relevant exposure.
2
How can I determine whether an installed X server is affected?
Check the X.org X server and XWayland versions. X.org X server versions earlier than 21.1.25 and XWayland versions earlier than 24.1.14 are affected.
3
What is the likely impact of successful exploitation?
A successful exploit could crash the X server or potentially lead to code execution in the X server context.