X.Org Libxi vulnerabilities
12 vulnerabilities
Known vulnerabilities in X.Org Libxi, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-1998debianlibxi+1
EPSS score2.80%
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.CVE-2013-1995debianlibxi+1EPSS score1.88%
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.CVE-2013-1984debianlibxi+1EPSS score1.82%
Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.CVE-2016-7945alpinelibxi+4EPSS score3.00%
Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.CVE-2016-7946alpinelibxi+4EPSS score3.01%
X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.CVE-2026-94282alpinelibxi+3EPSS score0.13%
An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.CVE-2026-94281alpinelibxi+3EPSS score0.20%
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.CVE-2026-93542alpinelibxi+3EPSS score0.25%
An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.CVE-2026-93541alpinelibxi+3EPSS score0.24%
An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by aCVE-2026-93543alpinelibxi+3EPSS score0.25%
An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.CVE-2026-93544alpinelibxi+3EPSS score0.24%
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.CVE-2026-93545alpinelibxi+3EPSS score0.20%
An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.