GCVE - cpe:2.3:a:freedesktop:libinput:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:libinput:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Freedesktop (`2c544e5d-e68e-5b35-a616-dc08f0ba697e`)
Product	Libinput (`37a8087c-b2f7-54fa-b5f6-a918559adff4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libinput`	purl2cpe	2026-06-01 10:14:03.684569
`pkg:deb/ubuntu/libinput`	purl2cpe	2026-06-01 10:14:03.684570
`pkg:github/freedesktop/wayland-libinput`	purl2cpe	2026-06-01 10:14:03.684572
`pkg:rpm/centos/libinput`	purl2cpe	2026-06-01 10:14:03.684573
`pkg:rpm/fedora/libinput`	purl2cpe	2026-06-01 10:14:03.684575
`pkg:rpm/opensuse/libinput`	purl2cpe	2026-06-01 10:14:03.684576

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-50292`	vulnerable	2026-06-08 08:07:02.835843	Details available HIGH (7.4) In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution Published: 2026-06-04T16:41:36.354Z Updated: 2026-06-04T18:12:18.647Z Open on db.gcve.eu Reference links https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1296 https://gitlab.freedesktop.org/libinput/libinput/-/commit/76f0d8a7f57e2868882864b4611281f12f704b55 https://www.openwall.com/lists/oss-security/2026/06/04/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-35093`	vulnerable	2026-06-08 07:59:13.646474	Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins HIGH (8.8) A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such as a graphical compositor. This could lead to the attacker monitoring keyboard input and sending that information to an external location. Published: 2026-04-01T13:54:00.189Z Updated: 2026-07-15T01:03:09.846Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2026-35093 https://bugzilla.redhat.com/show_bug.cgi?id=2453839 https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1271	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1215`	vulnerable	2026-06-08 05:39:12.427412	Details available A format string vulnerability was found in libinput Published: 2022-05-31T00:00:00.000Z Updated: 2024-08-02T23:55:24.456Z Open on db.gcve.eu Reference links https://seclists.org/oss-sec/2022/q2/47 https://security.gentoo.org/glsa/202310-14	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.