Live › vulnerability › CVE-2026-93518
Go to dashboardAn integer truncation bug in XkbResizeKeyType() lets an authenticated X client trigger a heap buffer overflow in the X.org X server or XWayland. An attacker can crash the server or potentially run code inside it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 15:33 UTC. All times on this page are UTC.
Systems running an X.org X server before 21.1.25 or XWayland before 24.1.14, including Linux and BSD desktops and any host where an X server is exposed to users. Only clients that can already connect to the X server can trigger the flaw, so single-user machines with no untrusted X clients face less risk. Headless servers without an X server can skip it.
No product ranges from the sources yet.
Xorg -version or X -version and compare against 21.1.25Xwayland -version and compare against 24.1.1421.1.25 or later24.1.14 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.
This page as .md · .json · in your agent: get_signal("CVE-2026-93518")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.