AZL-113849: CVE-2026-109095 affecting package xorg-x11-server 1.20.10-6

Q: Who can exploit this issue?

An attacker must be an authenticated X client. The issue affects Xwayland before 24.1.15 and X server versions before 21.1.26.

Q: What could exploitation allow?

An authenticated client could crash the X server or leak data as a result of an integer overflow in glamor Xv image-size handling.

Published Nov 13, 2026

Updated

A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.

Affected Software

1 affected component

azure-linux/xorg-x11-server<=1.20.10-6

Event History

Nov 13, 2026

Advisory Published

via OSV·02:17 PM

Data Sourced

via OSV·02:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109095

Frequently Asked Questions

Who can exploit this issue?

An attacker must be an authenticated X client. The issue affects Xwayland before 24.1.15 and X server versions before 21.1.26.

What could exploitation allow?

An authenticated client could crash the X server or leak data as a result of an integer overflow in glamor Xv image-size handling.

AZL-113849: CVE-2026-109095 affecting package xorg-x11-server 1.20.10-6

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What could exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could exploitation allow?