CVE-2026-109089: libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using libXi versions before 1.8.4 are affected when they connect to a malicious X server. The vulnerable code is reached while handling DEVICE_RESOLUTION data from that server.
What does an attacker need to exploit it?
An attacker needs to operate or induce a client to connect to a malicious X server that sends crafted DEVICE_RESOLUTION data. The vector is network-based and does not require attacker privileges, but user interaction is required.
What is the impact of successful exploitation?
Successful exploitation can cause a heap buffer overflow. The provided severity vector indicates potential high impact to confidentiality, integrity, and availability.
What should be done to remediate the issue?
Upgrade libXi to version 1.8.4 or later. If upgrading cannot happen immediately, avoid connecting affected clients to untrusted or attacker-controlled X servers.