Is CVE-2026-93517 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-93517

Description

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.