Search: CVE-2026-50262

CVE-2026-50262 is an out-of-bounds read vulnerability in the X.Org X server and Xwayland components of Red Hat Enterprise Linux 10. The flaw occurs in the __glXDisp_ChangeDrawableAttributes() function due to improper size validation, allowing reading beyond the intended buffer and potentially disclosing information. A related write path exists but requires byte-swapped clients, which are disabled by default. The vulnerability has a medium severity with a CVSS score of 5.5. Red Hat has issued an advisory including a security update that addresses this and several other related X.Org X server vulnerabilities.