Logo
vulnerabilityCVE-2026-34000
Name
CVE-2026-34000
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
xserver-xorg
Patched

Vulnerability Ratings#


6.1
CVSSv31
9.1
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
kirkstone
21.1.8
Not Affected
yocto
master
21.1.23
Not Affected

Resolved with patches#


xserver-xorg (yocto:scarthgap)

#
Title
Author
Resolve
1
xkb: Fix bounds check in _CheckSetGeom()
Olivier Fourdan <ofourdan@redhat.com>
CVE-2026-34000