Live › vulnerability › CVE-2026-93522
Go to dashboardA size mismatch in the CopyArea CPU-to-FBO path of X.Org X Server and XWayland causes a heap buffer overflow. An authenticated X client can crash the server or potentially execute code in the X server context.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 16:33 UTC. All times on this page are UTC.
Systems running an X.Org X Server older than or XWayland older than . The sources say the attacker must be an authenticated X client, so any machine where local or remote users can open X connections is in scope. Systems without an X server, or that run only on a fixed version, are not affected.
21.1.1524.1.14No product ranges from the sources yet.
Xorg -version or X -version to read the installed X.Org server versionXwayland -version to read the installed XWayland version21.1.15 (X.Org) or 24.1.14 (XWayland)21.1.15 or later24.1.14 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.
This page as .md · .json · in your agent: get_signal("CVE-2026-93522")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.