Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libXi 1.8.1-1 can let a malicious X server crash a client
published 1 month ago
Summary
The libXi library version 1.8.1-1 has a flaw that lets a compromised X server read memory it shouldn't, causing the program using libXi to stop working. This could interrupt applications that rely on the X display system. Updating libXi to version 1.8.4 or later fixes the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | libxi | <= 1.8.1-1 |
Original advisory text
CVE-2026-93545 affecting package libXi 1.8.1-1
An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
References
Timeline
Published24 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
AZL-104057 · OSV
Track software like this
Free during beta