Summary
[0.9.10-16.2]
- CVE-2026-88807 libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats
in RenderQueryPictFormats
Resolves: https://redhat.atlassian.net/browse/RHEL-267120
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libXrender | 0:0.9.10-16.el9_8.2 |
| Oracle Linux · 9 | libXrender-devel | 0:0.9.10-16.el9_8.2 |
Vulnerabilities 1
-
High 8.9
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.