AZL-113858: CVE-2026-109091 affecting package wayland 1.22.0-1

Q: What systems are exposed to this issue?

Systems running affected X.Org xwayland versions before 24.1.15 or X Server versions before 21.1.26 are exposed when they interact with a malicious monitor that supplies crafted EDID Display-Range descriptors.

Q: What does an attacker need to exploit the vulnerability?

An attacker needs to provide or emulate a malicious monitor capable of delivering crafted EDID Display-Range descriptors to the affected X server or xwayland instance.

Q: What is the potential impact of exploitation?

Successful exploitation may crash the X server or allow code execution.

Published Nov 13, 2026

Updated

A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Nov 13, 2026

Advisory Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109091

Frequently Asked Questions

What systems are exposed to this issue?

Systems running affected X.Org xwayland versions before 24.1.15 or X Server versions before 21.1.26 are exposed when they interact with a malicious monitor that supplies crafted EDID Display-Range descriptors.

What does an attacker need to exploit the vulnerability?

An attacker needs to provide or emulate a malicious monitor capable of delivering crafted EDID Display-Range descriptors to the affected X server or xwayland instance.

What is the potential impact of exploitation?

Successful exploitation may crash the X server or allow code execution.

AZL-113858: CVE-2026-109091 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What systems are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

What systems are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of exploitation?