CVE-2026-93517: X.Org Server GLX RenderLarge Heap Buffer Overflow

Q: Who can exploit this issue?

An authenticated X client can trigger the vulnerable GLX RenderLarge request. This limits exploitation to clients that can connect to the affected X server or XWayland instance.

Q: What versions are affected?

X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14 are affected.

Q: What is the potential impact?

Successful exploitation can crash the X server or potentially execute code in the X server's context.

Published Oct 28, 2026

Updated

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.

Affected Software

2 affected components

X.Org X.Org Server<21.1.25

X.Org Xwayland<24.1.14

Event History

Oct 28, 2026

CVE Published

via MITRE·01:16 PM

Data Sourced

via MITRE·01:16 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can trigger the vulnerable GLX RenderLarge request. This limits exploitation to clients that can connect to the affected X server or XWayland instance.

What versions are affected?

X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14 are affected.

What is the potential impact?

Successful exploitation can crash the X server or potentially execute code in the X server's context.

CVE-2026-93517: X.Org Server GLX RenderLarge Heap Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact?