ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI disclosed an X.Org Server GLX heap overflow that lets local attackers escalate privileges.
Trend Micro's Zero Day Initiative published ZDI-26-762, a heap-based buffer overflow in the X.Org Server GLX RenderLarge path. A local attacker who can already run low-privileged code can escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93517. The advisory does not report exploitation in the wild.
48