An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-94285.json"