Threats affecting pkg:deb/x.org/libx11

CVE-2026-94285 is an out-of-bounds read vulnerability in the byte-oriented codeset parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to crash connected X clients. The vulnerability has a medium severity rating with a CVSS score of 5.1. No known exploits are reported in the wild. Affected versions include all libX11 releases from 0 up to but not including 1.8.14.

CVE-2026-94284 is an out-of-bounds read vulnerability in the XIM trigger-key registration parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to cause a crash in attached X clients. The vulnerability has a medium severity rating with a CVSS score of 5.5, primarily impacting availability. No known exploits are reported in the wild. The issue affects libX11 versions from 0 up to but not including 1.8.14.

CVE-2026-94283 is an out-of-bounds read vulnerability in the X Input Method (XIM) attribute parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to crash connected X clients, causing denial of service. The vulnerability does not impact confidentiality or integrity but affects availability by causing application crashes.

CVE-2026-88806 is a heap-based buffer overflow vulnerability in libX11 versions before 1.8.14. It occurs during the handling of the XkbGetMap request, where the key_sym_map can be overflowed by a malicious X server. This vulnerability has a high severity with a CVSS score of 7.5. It requires user interaction and has a high impact on confidentiality, integrity, and availability.