CVE-2026-94286

An out-of-bounds read vulnerability in the RECORD reply parser of libXtst prior to version 1.2.6 allows malicious X servers to exploit this flaw, potentially leading to crashes of connected X clients. Organizations using affected versions of libXtst should prioritize patching this vulnerability to mitigate the risk of service disruptions and ensure the stability of their X client applications.