Out-of-Bounds Read in libXi Library

Executive Summary

This vulnerability is an out-of-bounds read in libXi's XQueryDeviceState() function. It exists in versions of libXi before 1.8.4. An attacker could exploit this to read memory outside the intended buffer, potentially accessing sensitive data.

Useful 0 Not Useful 0

Impact Analysis

The impact includes potential information disclosure where sensitive data could be exposed. It may also lead to application crashes due to memory corruption. The attack requires user interaction but could be triggered via malicious input.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is an out-of-bounds read in a specific library (libXi) with no clear impact on data privacy or security controls required by these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update libXi to version 1.8.4 or later to address the out-of-bounds read in XQueryDeviceState().

Useful 0 Not Useful 0