CVE-2026-88807

HighCVSS 8.9

Published: 21/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 21/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Risk Assessment

A malicious X server could inject code into attached X clients, potentially compromising the user's workstation. Risk applies to environments connecting to untrusted X servers.

Recommendation

Upgrade libXrender to version 0.9.13 or later. Avoid connecting to untrusted X servers.

Other vulnerabilities in libXrender

CVE-2025-49175Medium
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.

Original NVD description (English source)

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS