A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Info

CVECVE-2026-88807

First seen2026-09-22 05:16 UTC

Disclosed2026-09-21 14:17 UTC

Last updated2026-09-22 05:16 UTC

Channel statusauto

Summary

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).