A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-109089.json"