CVE-2026-93543: X.org Libxi

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Affected products

• X.org Libxi: before 1.8.4 (fixed in 1.8.4)

Published 2026-09-24. Last modified 2026-09-24.