CVE-2026-109088

Description

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

References

https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/11

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111114

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS