DEBIAN-CVE-2026-93522: Buffer Overflow

Q: Who can exploit this issue?

An authenticated X client can trigger the vulnerable CPU-to-FBO CopyArea path. The attack requires local access and low privileges, according to the provided vector.

Q: What is the potential impact on an affected system?

An attacker may crash the X server or potentially execute code in the X server context. Confidentiality, integrity, and availability are all rated high in the supplied severity vector.

Q: Which versions are affected?

The issue affects XWayland versions before 24.1.14. The description also identifies X.Org X Server versions before 21.1.15 as affected.

Published Oct 28, 2026

Updated

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Affected Software

3 affected componentsFixes available

debian/xwayland*

debian/xwayland<2:24.1.14-1

2:24.1.14-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/xwayland to a version that resolves this vulnerability.
Fixed in 2:24.1.14-1

Event History

Oct 28, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An authenticated X client can trigger the vulnerable CPU-to-FBO CopyArea path. The attack requires local access and low privileges, according to the provided vector.

What is the potential impact on an affected system?

An attacker may crash the X server or potentially execute code in the X server context. Confidentiality, integrity, and availability are all rated high in the supplied severity vector.

Which versions are affected?

The issue affects XWayland versions before 24.1.14. The description also identifies X.Org X Server versions before 21.1.15 as affected.

DEBIAN-CVE-2026-93522: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact on an affected system?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact on an affected system?

Which versions are affected?