AZL-111500: CVE-2026-93524 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An attacker must be an authenticated X client. The issue affects X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14.

Q: What could successful exploitation cause?

An authenticated X client may leak small amounts of information from X server memory or potentially crash the X server.

Published Oct 28, 2026

Updated

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Oct 28, 2026

Advisory Published

via OSV·05:18 PM

Data Sourced

via OSV·05:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93524

Frequently Asked Questions

Who can exploit this issue?

An attacker must be an authenticated X client. The issue affects X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14.

What could successful exploitation cause?

An authenticated X client may leak small amounts of information from X server memory or potentially crash the X server.

AZL-111500: CVE-2026-93524 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could successful exploitation cause?