CVE-2026-93522: X.Org Server Glamor CopyArea Heap Buffer Overflow
Published Oct 28, 2026
·Updated
A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.
Affected Software
2 affected components
X.Org X Server<21.1.15
X.Org Xwayland<24.1.14
Event History
Oct 28, 2026
CVE Published
via MITRE·04:03 PM
Data Sourced
via MITRE·04:03 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are exposed to this issue?
Systems running X.Org X Server before 21.1.15 or XWayland before 24.1.14 are affected. Exploitation requires an authenticated X client able to interact with the vulnerable server.
2
What access does an attacker need?
An attacker needs local access and low privileges sufficient to act as an authenticated X client. No user interaction is required.
3
What is the likely impact of successful exploitation?
A successful exploit can crash the X server and may allow code execution in the X server's context, affecting confidentiality, integrity, and availability.