RHSA-2026:71839

Vulnerability from csaf_redhat - Published: 2026-09-25 13:51 - Updated: 2026-09-25 22:28
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: libXi: * libXi-1.8.3-2.1.hum1 (aarch64, x86_64) * libXi-devel-1.8.3-2.1.hum1 (aarch64, x86_64) * libXi-1.8.3-2.1.hum1.src (src) Security Fix(es): libXi: * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState() function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated buffer boundaries, resulting in a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Moderate
CVE-2026-93542

A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension (XI2) device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read beyond memory boundaries and crash, resulting in a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 5 products, the same list as for CVE-2026-93541
Threats
Impact Moderate
CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 (XI2) class parser allows a malicious X server to cause a Denial of Service (DoS) by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient boundary checking causes the client to read beyond memory limits and terminate unexpectedly.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 5 products, the same list as for CVE-2026-93541
Threats
Impact Moderate
CVE-2026-93544

A flaw was found in libXi. This out-of-bounds read vulnerability allows a malicious X server to cause a Denial of Service (DoS) against attached client applications. By returning a specially crafted response to an XIQueryDevice request, the server triggers an invalid memory read within the client, leading to an abnormal application crash.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 5 products, the same list as for CVE-2026-93541
Threats
Impact Moderate
CVE-2026-93545

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices() function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application crash, resulting in a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 5 products, the same list as for CVE-2026-93541
Threats
Impact Moderate
CVE-2026-94281

A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices() function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting in a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 5 products, the same list as for CVE-2026-93541
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:71839 self
https://access.redhat.com/security/cve/CVE-2026-93541 external
https://access.redhat.com/security/cve/CVE-2026-93542 external
https://access.redhat.com/security/cve/CVE-2026-93543 external
https://access.redhat.com/security/cve/CVE-2026-93544 external
https://access.redhat.com/security/cve/CVE-2026-93545 external
https://access.redhat.com/security/cve/CVE-2026-94281 external
https://access.redhat.com/security/updates/classi… external
https://images.redhat.com/ external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-93541 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540596 external
https://www.cve.org/CVERecord?id=CVE-2026-93541 external
https://nvd.nist.gov/vuln/detail/CVE-2026-93541 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
https://access.redhat.com/security/cve/CVE-2026-93542 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540477 external
https://www.cve.org/CVERecord?id=CVE-2026-93542 external
https://nvd.nist.gov/vuln/detail/CVE-2026-93542 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
https://access.redhat.com/security/cve/CVE-2026-93543 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540529 external
https://www.cve.org/CVERecord?id=CVE-2026-93543 external
https://nvd.nist.gov/vuln/detail/CVE-2026-93543 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
https://access.redhat.com/security/cve/CVE-2026-93544 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540375 external
https://www.cve.org/CVERecord?id=CVE-2026-93544 external
https://nvd.nist.gov/vuln/detail/CVE-2026-93544 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
https://access.redhat.com/security/cve/CVE-2026-93545 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540434 external
https://www.cve.org/CVERecord?id=CVE-2026-93545 external
https://nvd.nist.gov/vuln/detail/CVE-2026-93545 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
https://access.redhat.com/security/cve/CVE-2026-94281 self
https://bugzilla.redhat.com/show_bug.cgi?id=2540402 external
https://www.cve.org/CVERecord?id=CVE-2026-94281 external
https://nvd.nist.gov/vuln/detail/CVE-2026-94281 external
https://gitlab.freedesktop.org/xorg/lib/libxi/-/m… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nlibXi:\n  * libXi-1.8.3-2.1.hum1 (aarch64, x86_64)\n  * libXi-devel-1.8.3-2.1.hum1 (aarch64, x86_64)\n  * libXi-1.8.3-2.1.hum1.src (src)\n\nSecurity Fix(es):\n\nlibXi:\n  * CVE-2026-93541\n  * CVE-2026-93542\n  * CVE-2026-93543\n  * CVE-2026-93544\n  * CVE-2026-93545\n  * CVE-2026-94281",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:71839",
        "url": "https://access.redhat.com/errata/RHSA-2026:71839"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93541",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93541"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93542",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93542"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93543",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93543"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93544",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93544"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-93545",
        "url": "https://access.redhat.com/security/cve/CVE-2026-93545"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-94281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-94281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71839.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-09-25T22:28:14+00:00",
      "generator": {
        "date": "2026-09-25T22:28:14+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:71839",
      "initial_release_date": "2026-09-25T13:51:49+00:00",
      "revision_history": [
        {
          "date": "2026-09-25T13:51:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-25T13:54:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-25T22:28:14+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXi-0:1.8.3-2.1.hum1@aarch64",
                "product": {
                  "name": "libXi-0:1.8.3-2.1.hum1@aarch64",
                  "product_id": "libXi-0:1.8.3-2.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXi@1.8.3-2.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXi-devel-0:1.8.3-2.1.hum1@aarch64",
                "product": {
                  "name": "libXi-devel-0:1.8.3-2.1.hum1@aarch64",
                  "product_id": "libXi-devel-0:1.8.3-2.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXi-devel@1.8.3-2.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXi-0:1.8.3-2.1.hum1@src",
                "product": {
                  "name": "libXi-0:1.8.3-2.1.hum1@src",
                  "product_id": "libXi-0:1.8.3-2.1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXi@1.8.3-2.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libXi-0:1.8.3-2.1.hum1@x86_64",
                "product": {
                  "name": "libXi-0:1.8.3-2.1.hum1@x86_64",
                  "product_id": "libXi-0:1.8.3-2.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXi@1.8.3-2.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libXi-devel-0:1.8.3-2.1.hum1@x86_64",
                "product": {
                  "name": "libXi-devel-0:1.8.3-2.1.hum1@x86_64",
                  "product_id": "libXi-devel-0:1.8.3-2.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libXi-devel@1.8.3-2.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXi-0:1.8.3-2.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64"
        },
        "product_reference": "libXi-0:1.8.3-2.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXi-0:1.8.3-2.1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src"
        },
        "product_reference": "libXi-0:1.8.3-2.1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXi-0:1.8.3-2.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64"
        },
        "product_reference": "libXi-0:1.8.3-2.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXi-devel-0:1.8.3-2.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64"
        },
        "product_reference": "libXi-devel-0:1.8.3-2.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libXi-devel-0:1.8.3-2.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        },
        "product_reference": "libXi-devel-0:1.8.3-2.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-93541",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T17:31:23.806701+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState() function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated buffer boundaries, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: Out-of-bounds read in libXi\u0027s XQueryDeviceState()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93541"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93541",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93541"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93541",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93541"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=7b6fffd13fd3914e0b39f3a4f131913da7f066e7",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=7b6fffd13fd3914e0b39f3a4f131913da7f066e7"
        }
      ],
      "release_date": "2026-09-24T15:58:58.788000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: Out-of-bounds read in libXi\u0027s XQueryDeviceState()"
    },
    {
      "cve": "CVE-2026-93542",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T16:56:02.236397+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540477"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension (XI2) device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read beyond memory boundaries and crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93542"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540477",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540477"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93542"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=f499944ad595b9bd7e7571c810842244caf150aa",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=f499944ad595b9bd7e7571c810842244caf150aa"
        }
      ],
      "release_date": "2026-09-24T16:03:00.095000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing"
    },
    {
      "cve": "CVE-2026-93543",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T17:06:55.628530+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540529"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 (XI2) class parser allows a malicious X server to cause a Denial of Service (DoS) by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient boundary checking causes the client to read beyond memory limits and terminate unexpectedly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93543"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540529",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540529"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93543",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93543"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93543",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93543"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=e2089ab748828273f916bbffd4e65b506aa50fdc",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=e2089ab748828273f916bbffd4e65b506aa50fdc"
        }
      ],
      "release_date": "2026-09-24T16:09:51.221000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser"
    },
    {
      "cve": "CVE-2026-93544",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T16:31:17.519473+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540375"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. This out-of-bounds read vulnerability allows a malicious X server to cause a Denial of Service (DoS) against attached client applications. By returning a specially crafted response to an XIQueryDevice request, the server triggers an invalid memory read within the client, leading to an abnormal application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540375",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540375"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93544"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=a88a341135b79f6ed450f481e4a5d6ba502382af",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=a88a341135b79f6ed450f481e4a5d6ba502382af"
        }
      ],
      "release_date": "2026-09-24T16:13:29.067000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing"
    },
    {
      "cve": "CVE-2026-93545",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T16:45:47.163975+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540434"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices() function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-93545"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540434",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540434"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-93545",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93545"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93545",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93545"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=234ce17d95c42d75f7f7fdb2bf7a24875451bc0a",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=234ce17d95c42d75f7f7fdb2bf7a24875451bc0a"
        }
      ],
      "release_date": "2026-09-24T16:20:35.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()"
    },
    {
      "cve": "CVE-2026-94281",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-24T16:37:33.319442+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2540402"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices() function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
          "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
          "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-94281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2540402",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540402"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-94281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-94281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-94281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94281"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=605f419d013153bf9e026cd100752ffbe930f3c1",
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=605f419d013153bf9e026cd100752ffbe930f3c1"
        }
      ],
      "release_date": "2026-09-24T16:23:50.110000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-25T13:51:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:71839"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@src",
            "Red Hat Hardened Images:libXi-0:1.8.3-2.1.hum1@x86_64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@aarch64",
            "Red Hat Hardened Images:libXi-devel-0:1.8.3-2.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.