PT-2026-145373
CVE-2026-109091
·
Published
2026-11-10
·
Updated
2026-11-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
X.Org xwayland versions prior to 24.1.15
X Server versions prior to 21.1.26
Description
A buffer overflow occurs when handling EDID Display-Range descriptors. This flaw allows a malicious monitor to cause the X server to crash or enable arbitrary code execution.
Recommendations
Update X.Org xwayland to version 24.1.15 or later.
Update X Server to version 21.1.26 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾