Is CVE-2026-109090 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-109090?

CVE-2026-109090 has a CVSS v3 severity of HIGH (7.5).

Back

Description

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.