DEBIAN-CVE-2026-93521: Buffer Overflow

Q: Who can exploit this vulnerability?

An authenticated X client can trigger the buffer overflow. Exploitation requires local access to an X session or another way to authenticate as an X client.

Q: What is the potential impact if exploited?

An attacker could crash the X server or execute code in the X server context. This can affect confidentiality, integrity, and availability of the affected graphical session.

Q: Which versions are affected?

X.Org X Server versions before 2.1.25 and XWayland versions before 24.4.14 are affected.

Published Oct 28, 2026

Updated

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

Affected Software

6 affected componentsFixes available

debian/xorg-server*

debian/xorg-server<2:21.1.25-1

2:21.1.25-1

debian/xwayland*

debian/xwayland<2:24.1.14-1

2:24.1.14-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/xorg-server to a version that resolves this vulnerability.
Fixed in 2:21.1.25-1
Upgrade
Upgrade debian/xwayland to a version that resolves this vulnerability.
Fixed in 2:24.1.14-1

Event History

Oct 28, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this vulnerability?

An authenticated X client can trigger the buffer overflow. Exploitation requires local access to an X session or another way to authenticate as an X client.

What is the potential impact if exploited?

An attacker could crash the X server or execute code in the X server context. This can affect confidentiality, integrity, and availability of the affected graphical session.

Which versions are affected?

X.Org X Server versions before 2.1.25 and XWayland versions before 24.4.14 are affected.

DEBIAN-CVE-2026-93521: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact if exploited?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact if exploited?

Which versions are affected?