Read the docs
Red Hat Security Advisory

RHSA-2026:71839

Red Hat Hardened Images RPMs Security Update

Released 2026-09-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

Priority LOW 32

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00213 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00213 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125