X.org Libxi
12 CVEs affecting X.org Libxi. Latest disclosed: 2026-09-28. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-7946 | High | 7.5 | 2016-12-13 | X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields. |
CVE-2016-7945 | High | 7.5 | 2016-12-13 | Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via v… |
CVE-2026-93543 | High | 7.4 | 2026-09-24 | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
CVE-2026-94281 | Medium | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
CVE-2026-93545 | Medium | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
CVE-2026-93544 | Medium | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client. |
CVE-2026-93542 | Medium | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X… |
CVE-2026-93541 | Medium | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a |
CVE-2026-94282 | Medium | 5.6 | 2026-09-28 | An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X clien… |
CVE-2013-1998 | | 2013-06-15 | Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted… | |
CVE-2013-1995 | | 2013-06-15 | X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign ext… | |
CVE-2013-1984 | | 2013-06-15 | Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors rela… |