Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:libxi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductLibxi (37c8f91d-5616-5984-9447-74d7162f0929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxi purl2cpe 2026-06-01 10:14:02.527904
pkg:deb/ubuntu/libxi purl2cpe 2026-06-01 10:14:02.527906
pkg:github/freedesktop/xorg-libxi purl2cpe 2026-06-01 10:14:02.527909
pkg:rpm/centos/libxi purl2cpe 2026-06-01 10:14:02.527912
pkg:rpm/fedora/libxi purl2cpe 2026-06-01 10:14:02.527915
pkg:rpm/opensuse/libxi purl2cpe 2026-06-01 10:14:02.527918

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-7946 vulnerable 2026-06-03 14:36:08.618522 Details available
X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.
Published: 2016-12-13T20:00:00.000Z
Updated: 2024-08-06T02:13:21.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7945 vulnerable 2026-06-03 14:36:08.617974 Details available
Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.
Published: 2016-12-13T20:00:00.000Z
Updated: 2024-08-06T02:13:21.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1998 vulnerable 2026-06-03 14:32:53.101188 Details available
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1995 vulnerable 2026-06-03 14:32:53.096296 Details available
X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1984 vulnerable 2026-06-03 14:32:53.049433 Details available
Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
Published: 2013-06-15T19:00:00.000Z
Updated: 2024-08-06T15:20:37.417Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.