CVE-2026-88807: x.org libxrender Heap-based Buffer Overflow
CVSS: 8.9v4.0HighAwaiting analysis
AliasesSUSE-SU-2026:23886-1SUSE-SU-2026:23900-1SUSE-SU-2026:4395-1SUSE-SU-2026:4397-1UBUNTU-CVE-2026-88807DEBIAN-CVE-2026-88807openSUSE-SU-2026:11834-1openSUSE-SU-2026:21909-1ALPINE-CVE-2026-88807
Published 21-09-2026Last modified 22-09-2026
Vulnerability summary
CVE-2026-88807 is a high (CVSS 8.9) Heap-based Buffer Overflow vulnerability in x.org libxrender. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.6% of scored vulnerabilities.
CVSS score
8.9/10
010
High · v4.0 (CVE.org)EPSS score
0.26%
0%100%
Low · Change unavailableKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 21-09-2026PublishedVulnerability first disclosed.
- 22-09-2026Last modifiedVulnerability information updated.
Description
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 8.9Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated8.9HighCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- OSV · DebianEcosystem advisory · calculated8.9HighCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVDNIST8.9HighCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · AlpineEcosystem advisory · calculated8.9HighCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
22-09-202620-10-2026
EPSS score0.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse19 products
- libXrender&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 0.9.10-150000.3.3.1
- libXrender&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 0.9.10-150000.3.3.1
- libXrender&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 0.9.10-150000.3.3.1
- libXrender&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 0.9.10-150000.3.3.1
- libXrender&distro=SUSE Linux Enterprise Micro 5.3< 0.9.10-150000.3.3.1
Opensuse2 products
- libXrender&distro=openSUSE Leap 16.0< 0.9.11-160000.3.1
- libXrender&distro=openSUSE Tumbleweed< 0.9.12-2.1
Alpine1 product
- libxrender< 0.9.13-r0
Debian1 product
- libxrenderAll versions (No fix recorded)
Ubuntu1 product
- libxrenderAll versions (No fix recorded)
X.org1 product
- libxrender< 0.9.13
6 vendors · 25 products
