CVE-2026-109095 · Infrastructure
NO FIX YET · SEE WHAT TO DO
An integer overflow in the glamor Xv image size handling of X.Org Xwayland and the X server can be triggered by an authenticated client. The result is a crash of the X server or leaked memory contents.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Systems running X.Org Xwayland or the X server with the glamor acceleration path in use, typically Linux desktops and workstations. Exposure needs a client that can already connect to the X display, so systems with no local X clients or with headless configurations can likely skip it.
Not affected if default-config, headless-server, no-x-clients
Who cares desktop, linux, xorg, xwayland
Xwayland -version or Xorg -version to read the installed version24.1.15 and X server before 21.1.26 are affected24.1.15 or later21.1.26 or laterA integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.