Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:libxrender:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductLibxrender (7f44d137-ee37-5d99-9658-3bfec53370fc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxrender purl2cpe 2026-06-01 10:14:02.612378
pkg:deb/ubuntu/libxrender purl2cpe 2026-06-01 10:14:02.612381
pkg:github/freedesktop/xorg-libxrender purl2cpe 2026-06-01 10:14:02.612384
pkg:github/neverware-mirrors/libxrender purl2cpe 2026-06-01 10:14:02.612387
pkg:rpm/centos/libxrender purl2cpe 2026-06-01 10:14:02.612390
pkg:rpm/fedora/libxrender purl2cpe 2026-06-01 10:14:02.612392
pkg:rpm/opensuse/libxrender purl2cpe 2026-06-01 10:14:02.612395

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88807 vulnerable 2026-10-13 12:29:54.701820 libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
Published: 2026-09-21T13:49:21.327Z
Updated: 2026-09-22T03:55:46.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7950 vulnerable 2026-06-08 05:08:13.510260 Details available
The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.
Published: 2016-12-13T20:00:00.000Z
Updated: 2024-08-06T02:13:21.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7949 vulnerable 2026-06-08 05:08:13.509672 Details available
Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.
Published: 2016-12-13T20:00:00.000Z
Updated: 2024-08-06T02:13:21.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.