CVE catalog

CVE-2026-94286

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.20% · Oct 25, 2026

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibxtstsid2:1.2.6-1fixed
Debianlibxtstforky2:1.2.5-1vulnerable
Debianlibxtsttrixie2:1.2.5-1vulnerable
Debianlibxtstbookworm2:1.2.3-1.1vulnerable
Ubuntulibxtstnoble2:1.2.3-1.1ubuntu0.1fixed
Ubuntulibxtst-devnoble2:1.2.3-1.1ubuntu0.1fixed
Ubuntulibxtst-docnoble2:1.2.3-1.1ubuntu0.1fixed
Ubuntulibxtst6noble2:1.2.3-1.1ubuntu0.1fixed
OpensuselibXtstleap 16.01.2.5-160000.4.1fixed
SuselibXtstlinux enterprise server 12 sp5-ltss1.2.2-8.3.1fixed
SuselibXtstlinux enterprise server ltss extended security 12 sp51.2.2-8.3.1fixed
SuselibXtstlinux enterprise micro 5.31.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise micro 5.41.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise micro 5.51.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise module for basesystem 15 sp71.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise high performance computing 15 sp4-espos1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise high performance computing 15 sp4-ltss1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise high performance computing 15 sp5-espos1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise high performance computing 15 sp5-ltss1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server 15 sp4-ltss1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server 15 sp5-ltss1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server 15 sp6-ltss1.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server for sap applications 15 sp41.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server for sap applications 15 sp51.2.3-150000.3.3.1fixed
SuselibXtstlinux enterprise server for sap applications 15 sp61.2.3-150000.3.3.1fixed
OpensuselibXtsttumbleweed1.2.5-2.1fixed
Ubuntulibxtstpro2:1.2.3-1vulnerable
Ubuntulibxtstpro2:1.2.3-1ubuntu0.20.04.1~esm1fixed
Ubuntulibxtst22.042:1.2.3-1build2vulnerable
Ubuntulibxtst22.042:1.2.3-1build3vulnerable
Ubuntulibxtst22.042:1.2.3-1build4vulnerable
Ubuntulibxtst22.042:1.2.3-1ubuntu0.22.04.1fixed
Ubuntulibxtst24.042:1.2.3-1.1vulnerable
Ubuntulibxtst24.042:1.2.3-1.1build1vulnerable
Ubuntulibxtst24.042:1.2.3-1.1ubuntu0.1fixed
Ubuntulibxtst26.102:1.2.5-1build1vulnerable
Ubuntulibxtst26.102:1.2.5-1ubuntu1fixed
Ubuntulibxtst26.042:1.2.5-1vulnerable
Ubuntulibxtst26.042:1.2.5-1build1vulnerable
Ubuntulibxtst26.042:1.2.5-1ubuntu0.1fixed
Alpinelibxtst3.241.2.6-r0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibxtstsourcesid2:1.2.6-1not yet assignedNot reported[1149667]
Debianlibxtstsourceforky(unfixed)not yet assignedNot reported[1149667]
Debianlibxtstsourcetrixie(unfixed)not yet assignedNot reported[1149667]
Debianlibxtstsourcebookworm(unfixed)not yet assignedNot reported[1149667]
Ubuntulibxtstdebnoble2:1.2.3-1.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibxtst-devdebnoble2:1.2.3-1.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibxtst-docdebnoble2:1.2.3-1.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibxtst6debnoble2:1.2.3-1.1ubuntu0.1Not reportedNot reportedNot reported
OpensuselibXtstrpmleap 16.01.2.5-160000.4.1Not reportedOPENSUSE-SU-2026:22031-1Not reported
SuselibXtstrpmlinux enterprise server 12 sp5-ltss1.2.2-8.3.1Not reportedSUSE-SU-2026:4565-1Not reported
SuselibXtstrpmlinux enterprise server ltss extended security 12 sp51.2.2-8.3.1Not reportedSUSE-SU-2026:4565-1Not reported
SuselibXtstrpmlinux enterprise micro 5.31.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise micro 5.41.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise micro 5.51.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise module for basesystem 15 sp71.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise high performance computing 15 sp4-espos1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise high performance computing 15 sp4-ltss1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise high performance computing 15 sp5-espos1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise high performance computing 15 sp5-ltss1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server 15 sp4-ltss1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server 15 sp5-ltss1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server 15 sp6-ltss1.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server for sap applications 15 sp41.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server for sap applications 15 sp51.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
SuselibXtstrpmlinux enterprise server for sap applications 15 sp61.2.3-150000.3.3.1Not reportedSUSE-SU-2026:4566-1Not reported
OpensuselibXtstrpmtumbleweed1.2.5-2.1Not reportedOPENSUSE-SU-2026:11897-1Not reported
Ubuntulibxtstdebpro2:1.2.3-1ubuntu0.20.04.1~esm1Not reportedUBUNTU-CVE-2026-94286Not reported
Ubuntulibxtstdeb22.042:1.2.3-1ubuntu0.22.04.1Not reportedUBUNTU-CVE-2026-94286Not reported
Ubuntulibxtstdeb24.042:1.2.3-1.1ubuntu0.1Not reportedUBUNTU-CVE-2026-94286Not reported
Ubuntulibxtstdeb26.102:1.2.5-1ubuntu1Not reportedUBUNTU-CVE-2026-94286Not reported
Ubuntulibxtstdeb26.042:1.2.5-1ubuntu0.1Not reportedUBUNTU-CVE-2026-94286Not reported
Alpinelibxtstapk3.241.2.6-r0Not reportedALPINE-CVE-2026-94286Not reported

[Debian bug #1149667]

Notes

[trixie] libxtst: Minor issue [bookworm] libxtst: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libxtst6]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.3-1.1 · amd64 · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

    • 2:1.2.3-1.1 · arm64 · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

  • [libxtst-dev]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.3-1.1 · amd64 · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

    • 2:1.2.3-1.1 · arm64 · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

  • [libxtst-doc]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.3-1.1 · all · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

    • 2:1.2.3-1.1 · all · bookworm

      Affected

      nvd · libxtst · debian · bookworm; nvd · libxtst · debian · 12

[Debian 13 (Trixie)]

  • [libxtst6]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.5-1 · amd64 · trixie

      Affected

      nvd · libxtst · debian · 13

    • 2:1.2.5-1 · arm64 · trixie

      Affected

      nvd · libxtst · debian · 13

  • [libxtst-dev]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.5-1 · amd64 · trixie

      Affected

      nvd · libxtst · debian · 13

    • 2:1.2.5-1 · arm64 · trixie

      Affected

      nvd · libxtst · debian · 13

  • [libxtst-doc]Affected

    Source package: [libxtst]

    Details (2)

    • 2:1.2.5-1 · all · trixie

      Affected

      nvd · libxtst · debian · 13

    • 2:1.2.5-1 · all · trixie

      Affected

      nvd · libxtst · debian · 13

[openSUSE Tumbleweed]

  • [libXtst6]Unknown

    Source package: [libXtst]

    Details (1)

    • 1.2.5-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.5-2.1

      Version impact unknown

      nvd · libXtst · opensuse · tumbleweed

  • [libXtst6-32bit]Unknown

    Source package: [libXtst]

    Details (1)

    • 1.2.5-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.5-2.1

      Version impact unknown

      nvd · libXtst · opensuse · tumbleweed

  • [libXtst-devel]Unknown

    Source package: [libXtst]

    Details (1)

    • 1.2.5-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.5-2.1

      Version impact unknown

      nvd · libXtst · opensuse · tumbleweed

  • [libXtst-devel-32bit]Unknown

    Source package: [libXtst]

    Details (1)

    • 1.2.5-1.7 · x86_64 · tumbleweed

      Unknown · Fixed: 1.2.5-2.1

      Version impact unknown

      nvd · libXtst · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]