{"id":"CVE-2026-88807","published":"2026-09-21T14:17:22.410","lastModified":"2026-09-22T04:18:02.523","description":"A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}