Description
A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server before 21.1.26 and xwayland before 24.1.15 could be used to causes crashes by authenticated X clients.
Published: 2026-11-13
Score: 7.8 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 13 Nov 2026 11:00:00 +0000

Type Values Removed Values Added
Description A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server before 21.1.26 and xwayland before 24.1.15 could be used to causes crashes by authenticated X clients.
Title X.Org Server XvQueryImageAttributes Negative Size Reply
First Time appeared X.org
X.org xorg-x11-server
X.org xwayland
Weaknesses CWE-191
CPEs cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*
Vendors & Products X.org
X.org xorg-x11-server
X.org xwayland
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

X.org Xorg-x11-server Xwayland
cve-icon MITRE

Status: PUBLISHED

Assigner: suse

Published:

Updated: 2026-11-13T10:50:09.683Z

Reserved: 2026-10-13T09:50:30.689Z

Link: CVE-2026-109903

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-13T11:17:14.167

Modified: 2026-11-13T11:17:15.377

Link: CVE-2026-109903

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-191

    Integer Underflow (Wrap or Wraparound)