CVE-2026-93542: X.org Libxi

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

Affected products

• X.org Libxi: before 1.8.4 (fixed in 1.8.4)

Published 2026-09-24. Last modified 2026-09-24.