FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libXtst -- multiple vulnerabilities

Affected packages
		libXtst	<	1.2.6

Details

VuXML ID	39d5f71d-ca2a-11f1-ada1-ac5afc632ba3
Discovery	2026-10-17
Entry	2026-10-17

X.Org reports:

Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.

CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser

CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop

[source]

References

CVE Name	CVE-2026-109088
CVE Name	CVE-2026-94286
URL	https://lists.x.org/archives/xorg-announce/2026-October/003752.html