{"schema_version":"1.7.2","id":"OESA-2026-4248","modified":"2026-10-16T11:58:34Z","published":"2026-10-16T11:58:34Z","upstream":["CVE-2026-88806","CVE-2026-94283","CVE-2026-94284","CVE-2026-94285"],"summary":"libX11 security update","details":"Core X11 protocol client library.\r\n\r\nSecurity Fix(es):\n\nA malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.(CVE-2026-88806)\n\nAn out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94283)\n\nAn out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94284)\n\nAn out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94285)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"libX11","purl":"pkg:rpm/openEuler/libX11&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-4.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["libX11-1.8.7-4.oe2403sp3.aarch64.rpm","libX11-debuginfo-1.8.7-4.oe2403sp3.aarch64.rpm","libX11-debugsource-1.8.7-4.oe2403sp3.aarch64.rpm","libX11-devel-1.8.7-4.oe2403sp3.aarch64.rpm"],"noarch":["libX11-help-1.8.7-4.oe2403sp3.noarch.rpm"],"src":["libX11-1.8.7-4.oe2403sp3.src.rpm"],"x86_64":["libX11-1.8.7-4.oe2403sp3.x86_64.rpm","libX11-debuginfo-1.8.7-4.oe2403sp3.x86_64.rpm","libX11-debugsource-1.8.7-4.oe2403sp3.x86_64.rpm","libX11-devel-1.8.7-4.oe2403sp3.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4248"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88806"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94283"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94284"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94285"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"database_specific":{"severity":"High"}}