Is CVE-2026-109089 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109089?

CVE-2026-109089 has a CVSS v3 severity of HIGH (7.5).

Back

Description

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.