CVE-2026-93545: X.org Libxi

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

Affected products

• X.org Libxi: before 1.8.4 (fixed in 1.8.4)

Published 2026-09-24. Last modified 2026-09-24.