A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser (CVE-2026-94286). This issue affects Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat has issued a security advisory with an update to address this vulnerability.

Red Hat Security Advisory: libXtst security update

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser (CVE-2026-94286). This issue affects Red Hat Enterprise Linux 9 on multiple architectures. Red Hat has released an update to address this vulnerability.

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue is tracked as CVE-2026-94286 and affects Red Hat Enterprise Linux 10 across multiple architectures. Red Hat has issued an important security update to address this vulnerability.

A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue affects Red Hat Enterprise Linux 8.8 variants. Red Hat has released an important security update to address this vulnerability.

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser (CVE-2026-94286). This issue affects Red Hat Enterprise Linux 8.4 Extended Life Cycle and AUS versions. Red Hat has issued a security update to address this vulnerability.

A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue affects Red Hat Enterprise Linux 8.6 variants. Red Hat has released security updates to address this vulnerability.

A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue affects Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions and related variants. Red Hat has issued a security advisory with an update to address this vulnerability.

libXtst

A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue affects Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Red Hat has issued a security advisory with an update to address this vulnerability.

A denial of service vulnerability (CVE-2026-94286) exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This flaw can cause the affected application to crash or become unresponsive. Red Hat has issued an important security update addressing this issue in Red Hat Enterprise Linux 9.2 and related variants.

A security vulnerability (CVE-2026-94286) has been identified in the X.Org X11 libXtst runtime library affecting Red Hat Enterprise Linux 10.0 Extended Update Support and related variants. The flaw is a denial of service caused by an out-of-bounds read in the RECORD reply parser. Red Hat has issued an important security update to address this issue.

A security update has been issued for the libXtst package by SUSE Product Security Team. This update is functionally equivalent to the Red Hat advisory RHSA-2026:91223. No specific details about the vulnerability or affected versions are provided in the available data.

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser (CVE-2026-94286). This issue affects Red Hat Enterprise Linux 10 and related variants. Red Hat has issued a security advisory and released updated libXtst packages to address this vulnerability.

libXtst-devel

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This flaw, tracked as CVE-2026-94286, affects libXtst versions prior to 1.2.4-8.el10_2.1. The issue has been addressed in the fixed version 1.2.4-8.el10_2.1, and an update is available from Red Hat for multiple Red Hat Enterprise Linux 10 variants.

Important: libXtst security update (CVE-2026-94286)

A security vulnerability in the X.Org X11 libXtst runtime library allows a denial of service via an out-of-bounds read in the RECORD reply parser. This issue is tracked as CVE-2026-94286 and affects Red Hat Enterprise Linux 8 across multiple architectures. Red Hat has issued a security update to address this vulnerability.

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue is tracked as CVE-2026-94286. The vulnerability affects versions of libXtst prior to 1.2.3-16.el9_8.1. Red Hat has issued an important security update to address this flaw in Red Hat Enterprise Linux 9 and related variants.

A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This issue is identified as CVE-2026-94286. The vulnerability affects libXtst versions prior to 1.2.3-8.el8_10. Red Hat has released an important security update to address this issue in Red Hat Enterprise Linux 8. No known exploits in the wild have been reported.

A security vulnerability (CVE-2026-94286) was found in the libXtst library used in Red Hat Hardened Images RPMs. The flaw is an out-of-bounds read in the RECORD extension reply parser that can be triggered by a malicious X server. This vulnerability can cause a denial of service (DoS) by crashing client applications and may also lead to limited information disclosure. No mitigation is currently available that meets Red Hat's criteria for ease of use and deployment. A security update including fixed RPMs has been released by Red Hat.

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

libxtst

A security update for libXtst addresses an out-of-bounds read vulnerability in the RECORD reply parser identified as CVE-2026-94286. This flaw could potentially lead to memory safety issues. The affected versions are specific SUSE package builds of libXtst. The vulnerability is rated as high severity. No public exploit or CVSS score is currently available.

Security update for libXtst

CVE-2026-94286 is a high-severity vulnerability in x.org's libXtst library before version 1.2.6. It involves a buffer over-read in the RECORD reply parser that could be exploited by malicious X servers to crash connected X clients. The vulnerability does not allow data modification or privilege escalation but can cause denial of service by crashing clients.

Search: CVE-2026-94286