CVE-2026-109903
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server before 21.1.26 and xwayland before 24.1.15 could be used to causes crashes by authenticated X clients.