CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState()
Published Sep 24, 2026
·Updated
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
Affected Software
1 affected component
X.Org libXi<1.8.4
Event History
Sep 24, 2026
CVE Published
via MITRE·03:58 PM
Data Sourced
via MITRE·03:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which libXi versions require remediation?
libXi versions before 1.8.4 are affected. Upgrade to 1.8.4 or later.
2
What conditions are indicated for exploitation?
The CVSS vector indicates network access, low attack complexity, no required privileges, and required user interaction. The stated impact is high availability impact, with no confidentiality or integrity impact.