Buffer overflow in X.org Libxrender

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References