AZL-113870: CVE-2026-109095 affecting package wayland 1.22.0-1

Q: Who can exploit this issue?

An authenticated client that can interact with the affected X server or Xwayland instance could trigger the flaw. The described impacts are crashing the X server or leaking data.

Q: Which upstream components are affected?

The issue affects X.Org Xwayland versions before 24.1.15 and X server versions before 21.1.26 when handling glamor Xv image sizes.

Published Nov 13, 2026

Updated

A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.

Affected Software

1 affected component

azure-linux/wayland<=1.22.0-1

Event History

Nov 13, 2026

Advisory Published

via OSV·02:17 PM

Data Sourced

via OSV·02:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109095

Frequently Asked Questions

Who can exploit this issue?

An authenticated client that can interact with the affected X server or Xwayland instance could trigger the flaw. The described impacts are crashing the X server or leaking data.

Which upstream components are affected?

The issue affects X.Org Xwayland versions before 24.1.15 and X server versions before 21.1.26 when handling glamor Xv image sizes.

AZL-113870: CVE-2026-109095 affecting package wayland 1.22.0-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

Which upstream components are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which upstream components are affected?