CVE-2026-88806
Received Received - Intake

Buffer Overflow in libX11 XkbGetMap Handling

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: SUSE

Description
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2026-88806
EUVD
EUVD-2026-83914

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in libX11 before version 1.8.14. It occurs when handling XkbGetMap, which can overflow the key_sym_map buffer. A malicious X server could exploit this to execute arbitrary code or cause a denial of service.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain control of your system, execute malicious code, or crash applications using libX11. It may lead to unauthorized access, data theft, or system disruption.

Compliance Impact

This vulnerability could potentially lead to unauthorized access or control of a system due to a buffer overflow in libX11, which may compromise data confidentiality and integrity. Such breaches could violate compliance requirements under GDPR (e.g., unauthorized data access) or HIPAA (e.g., protected health information exposure), depending on the affected system and data involved.

Mitigation Strategies

Update libX11 to version 1.8.14 or later to address the buffer overflow in XkbGetMap handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88806. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart