AZL-111485: CVE-2026-93518 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An attacker needs to be an authenticated X client. The issue affects X.org X server deployments before 21.1.25 and XWayland deployments before 24.1.14.

Q: What could successful exploitation allow?

Successful exploitation could crash the X server or potentially enable code execution in the X server process through a heap buffer overflow.

Published Oct 28, 2026

Updated

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Oct 28, 2026

Advisory Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93518

Frequently Asked Questions

Who can exploit this issue?

An attacker needs to be an authenticated X client. The issue affects X.org X server deployments before 21.1.25 and XWayland deployments before 24.1.14.

What could successful exploitation allow?

Successful exploitation could crash the X server or potentially enable code execution in the X server process through a heap buffer overflow.

AZL-111485: CVE-2026-93518 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation allow?