VULNERABILITY INTELLIGENCE
CVE-2026-34002
CVSS score6.1 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2026-05-05
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Description
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.
Weakness classification
- CWE-805: Buffer Access with Incorrect Length Value