Skip to content
Oracle libXtst Update Fixes DoS Vulnerability in RECORD Parser

Oracle libXtst Update Fixes DoS Vulnerability in RECORD Parser

First seen 30 Oct 2026, 11:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 12:47 UTC
  • •CVE-2026-94286 is a high-severity DoS vulnerability in the libXtst library.
  • •Affected versions include libXtst 1.2.3-8, 1.2.3-16, and 1.2.4-8 for Oracle Linux.
  • •Patches have been released, and users are advised to update immediately.

Oracle has released updates for the libXtst library to address a Denial of Service (DoS) vulnerability identified as CVE-2026-94286. This flaw allows an attacker to exploit an out-of-bounds read in the RECORD parser, potentially leading to service disruptions. The affected versions include libXtst 1.2.3-8 for Oracle Linux 8, 1.2.3-16 for Oracle Linux 9, and 1.2.4-8 for Oracle Linux 10. The vulnerability was published on September 28, 2026, and has a CVSS score of 7.1, categorizing it as high severity. Users are urged to apply the patches immediately to mitigate the risk of exploitation. No has been reported at this time, and the updates are available for various architectures including x86_64 and aarch64.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-28
CVE-2026-94286 published
Oracle disclosed a Denial of Service vulnerability in the libXtst library with a CVSS score of 7.1.
Linuxsecurity
2026-10-28
Oracle releases libXtst updates
Oracle issued updates for libXtst to fix the DoS vulnerability across multiple Linux versions.
Linuxsecurity
2026-10-30
Further updates released
Additional updates for libXtst were made available, ensuring all affected systems are patched.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track CVE-2026-94286 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

Which versions are affected?
Affected versions include libXtst 1.2.3-8 for Oracle Linux 8, 1.2.3-16 for Oracle Linux 9, and 1.2.4-8 for Oracle Linux 10.
Is this vulnerability being actively exploited?
No active exploitation has been reported for CVE-2026-94286 at this time.
What should I do to protect my systems?
Apply the latest patches for libXtst as soon as possible to mitigate the risk of the DoS vulnerability.