{"id":"CVE-2026-88807","title":"A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.","summary":"A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.","severity":"high","cvss":8.9,"cvssVector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","cwe":["CWE-122"],"vendor":"X.org","product":"libXrender","affected":["libXrender < 0.9.13"],"published":"2026-09-21","updated":"2026-09-22","sourceUpdated":"2026-09-22T19:40:05.870","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88807","references":[{"url":"https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19","label":"meissner@suse.de"}],"tags":["nvd","cve.org"],"epss":0.0026,"epssPercentile":0.18005,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-21T00:00:00+00:00"},"cvssSource":"cna","ingestedAt":"2026-09-21T14:38:56.363Z","slug":"CVE-2026-88807","body":"## Overview\n\nA heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":49,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}