This vulnerability involves an out-of-bounds read in the __glXDisp_ChangeDrawableAttributes() function of the X.Org X server and Xwayland on Red Hat Enterprise Linux 10. The issue arises from an incorrect size validation check that permits reading a client-controlled number of bytes beyond the request buffer, leading to information disclosure. Although a write path exists, it depends on byte-swapped clients, a feature disabled by default. The CVSS 3.1 base score is 5.5, indicating medium severity, with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. The vendor advisory does not specify a remediation level or patch availability.

The vulnerability allows a local attacker with low privileges to cause an out-of-bounds read in the X.Org X server or Xwayland, potentially disclosing sensitive information from memory. There is no impact on integrity or availability. The write path is not exploitable under default configurations. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-50262 for current remediation guidance. Until an official fix is released, consider restricting access to the X server and Xwayland services to trusted users only. No vendor advisory indicates that the issue is already mitigated or that no action is required.