An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxtst | Oct 20, 2026 | Sep 28, 2026 |
| Redhat_linux | — | No solution exists | Sep 29, 2026 | Sep 28, 2026 |
| Ubuntu | — | No solution existsUpgrade libxtst6 (Ubuntu Pro)Upgrade libxtst-devUpgrade libxtst-dev (Ubuntu Pro)Upgrade libxtst6 | Oct 20, 2026 | Oct 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub