← Database

CVE-2026-109904

N/A CVSS: N/A Published: 2026-11-13 Modified: 2026-11-13

Description

A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.

Affected Platforms

Unknown

Weakness Type

CWE-126

References