X.org Libxrender vulnerabilities

3 CVEs affecting X.org Libxrender, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-88807, published 2026-09-21.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-7949, published 2016-12-13. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors…
• CVE-2016-7950, published 2016-12-13. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.
• CVE-2026-88807, published 2026-09-21. High severity, CVSS 8.9. EPSS: 0.3% chance of exploitation in the next 30 days. A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.