X.Org reports:
Multiple issues have been found in the X client library
implementations published by X.Org for which we are
releasing security fixes for.
- CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState()
- CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()
- CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser
- CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing
- CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices()
- CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing
- CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion.
- CVE-2026-109089: libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
- CVE-2026-109090: libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow