| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-109090 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | A malicious X server could cause a heap overflow by injecting a largeD ... |
| CVE-2026-109089 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8. ... |
| CVE-2026-94282 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversi ... |
| CVE-2026-94281 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XListInputDevices() class parsing in ... |
| CVE-2026-93545 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1 ... |
| CVE-2026-93544 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in li ... |
| CVE-2026-93543 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8. ... |
| CVE-2026-93542 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XI2 class parsing via size_classes() ... |
| CVE-2026-93541 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1 ... |