CVE-2026-93541

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

• Published Sep 24, 2026
• CVSS 6.5 medium
• 0.2% chance of exploitation in the next 30 days (EPSS)
• A fix is available

CVE-2026-93541 at the National Vulnerability Database