What is GHSA-xpxf-r4w9-gf5m?

GHSA-xpxf-r4w9-gf5m is a security advisory published by GitHub Security Advisories with Medium severity. A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland...

Which CVE IDs does GHSA-xpxf-r4w9-gf5m cover?

GHSA-xpxf-r4w9-gf5m covers the following CVE IDs: CVE-2026-109904. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-xpxf-r4w9-gf5mMedium

A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland...

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-109904 →

📋 Description

A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-109904
https://gitlab.freedesktop.org/xorg/xserver/-/commit/ff754b812597177412f2e2fa2b1dd1eecbeb75cf
https://gitlab.freedesktop.org/xorg/xserver/-/commit/a3899d75e180d73f2971af2a402e6fdf19c0339c
https://github.com/advisories/GHSA-xpxf-r4w9-gf5m