Vulnerabilities

TI-2026-37034 CVE-2026-50292 · GHSA-jcq8-v68h-2c44

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys…

HIGH 76

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-06-04 Partial fix · 1.30.4, 1.31.3 CWE-93

TI-2026-27294 CVE-2026-35094 · GHSA-9pg8-4hvg-h64m

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

LOW 24

A flaw was found in libinput.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-04-01 No fix listed CWE-825

TI-2026-27293 CVE-2026-35093 · GHSA-mr79-hxw4-8vpf

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

LOW 39

A flaw was found in libinput.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-01 Will not fix CWE-94

TI-2022-01102 CVE-2022-1215 · GHSA-q3fm-hh84-2m38

A format string vulnerability was found in libinput

LOW 34

A format string vulnerability was found in libinput

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2022-05-31 Partial fix CWE-134

Vulnerabilities

Filters

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys…

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

A format string vulnerability was found in libinput