CVE Tools
Track your stack

LIBX11

22 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for LIBX11, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

LIBX11 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
LIBX11 CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-094
2026-100
2026-110

Severity

How the 22 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical627%
  • High627%
  • Medium941%
  • Low15%

Latest CVEs

The 15 most recently published vulnerabilities affecting LIBX11.

  1. CVE-2026-94285Out-of-bounds read in libX11's byte-oriented codeset parser5.1
  2. CVE-2026-94284Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser5.5
  3. CVE-2026-94283Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser6.5
  4. CVE-2026-88806libX11 XkbGetMap Reply Heap-based Buffer Overflow7.5
  5. CVE-2023-43787Libx11: integer overflow in xcreateimage() leading to a heap overflow7.8
  6. CVE-2023-43786Libx11: stack exhaustion from infinite recursion in putsubimage()5.5
  7. CVE-2023-43785Libx11: out-of-bounds memory access in _xkbreadkeysyms()6.5
  8. CVE-2023-3138A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within ...7.5
  9. CVE-2021-31535LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contai...9.8
  10. CVE-2020-14363An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases,...7.8
  11. CVE-2020-14344An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when se...6.7
  12. CVE-2018-14598An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that w...7.5
  13. CVE-2018-14600An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 byt...9.8
  14. CVE-2018-14599An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unsp...9.8
  15. CVE-2016-7943The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.9.8

Product grouping is registry-driven, with AI assist and human review. How it works