CVE-2026-93522

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an out-of-bounds memory write, potentially leading to privilege escalation, arbitrary code execution, or a denial of service (DoS).

Red Hat rates this vulnerability as Important because an authenticated local user can abuse memory corruption in the graphics subsystem to cause a denial of service or potentially execute arbitrary code with elevated display server privileges. Systems deploying graphical desktop environments utilize hardware-accelerated 2D rendering by default, exposing both standalone Xorg and Xwayland environments. Headless enterprise deployments and systems without graphical display services installed are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.