Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 28

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00213 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00213 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 32

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125
Priority LOW 28

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125