UBUNTU-CVE-2026-109089: Buffer Overflow

Published Oct 27, 2026

Updated

A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

Affected Software

7 affected components

ubuntu/libxi*

Event History

Oct 27, 2026

CVE Published

via OSV·05:16 PM

Data Sourced

via OSV·05:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What systems are realistically exposed to this issue?

Ubuntu systems using a libXi version earlier than 1.8.4 are exposed when they connect to an attacker-controlled or otherwise malicious X server.

What does an attacker need to exploit the vulnerability?

The attacker needs to operate or induce a client to connect to a malicious X server that sends a crafted DEVICE_RESOLUTION response. No privileges are required, but user interaction is required according to the supplied severity vector.

What is the potential impact of successful exploitation?

Successful exploitation can overflow heap memory. The severity vector indicates potential high impact to confidentiality, integrity, and availability.

UBUNTU-CVE-2026-109089: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What systems are realistically exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What systems are realistically exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of successful exploitation?