Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-94283

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11…

Risk score
41/100
CVSS
6.5 v3.1
Exploit chance (30 days)
0.2%
Published
28 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
Affected
See advisory
Fix
Upgrade the product to 1.8.14 or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 6.5 medium

References

Original description

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

Last activity 28 Sep 2026. Patch Forecast updates every hour.