Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

OpenEuler libXtst can crash client applications

published 19 days ago

Summary

The libXtst library used by X.Org X11 on OpenEuler systems may read beyond its intended data when communicating with a malicious X server, which can cause the client program to stop working. This could affect any application that relies on the library for input handling. Apply the library update that fixes the issue (version 1.2.6 or newer) as soon as possible.

What to do

Update openeuler libxtst to version 1.2.4-3.oe2203sp4.

Affected software

Ecosystem	Vendor	Product	Affected versions
openEuler:22.03-LTS-SP4	openeuler	libxtst	< 1.2.4-3.oe2203sp4 Fix: upgrade to 1.2.4-3.oe2203sp4

Original advisory text

libXtst security update

X.Org X11 libXtst runtime library

Security Fix(es):

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.(CVE-2026-94286)

References

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-94286 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.1 High

Timeline

Published16 Oct 2026

Updated16 Oct 2026

First seen16 Oct 2026

Sources

OESA-2026-4325 · OSV

Track software like this

Free during beta