A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser. This flaw, tracked as CVE-2026-94286, affects libXtst versions prior to 1.2.4-8.el10_2.1. The issue has been addressed in the fixed version 1.2.4-8.el10_2.1, and an update is available from Red Hat for multiple Red Hat Enterprise Linux 10 variants.