JLSEC-2026-469

See a problem?
Please try reporting it to the source first.
Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-469.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-469.json
JSON Data
https://api.osv.dev/v1/vulns/JLSEC-2026-469
Upstream
  • EUVD-2020-6488
  • GHSA-g6cq-58wq-v493
Published
2026-05-07T17:12:07.051Z
Modified
2026-05-07T17:32:25.801864372Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)...
Details

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

Database specific 
{
    "sources": [
        {
            "modified": "2024-11-21T05:03:03.373Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14344",
            "published": "2020-08-05T14:15:12.420Z",
            "id": "CVE-2020-14344",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-14344",
            "database_specific": {
                "status": "Modified"
            },
            "imported": "2026-05-07T16:20:05.543Z"
        },
        {
            "modified": "2023-01-31T05:08:25Z",
            "published": "2022-05-24T17:24:58Z",
            "id": "GHSA-g6cq-58wq-v493",
            "url": "https://api.github.com/advisories/GHSA-g6cq-58wq-v493",
            "html_url": "https://github.com/advisories/GHSA-g6cq-58wq-v493",
            "imported": "2026-05-07T16:20:09.033Z"
        },
        {
            "modified": "2024-08-04T12:39:36Z",
            "published": "2020-08-05T13:08:33Z",
            "id": "EUVD-2020-6488",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2020-6488",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6488",
            "imported": "2026-05-07T16:20:07.392Z"
        }
    ],
    "license": "CC-BY-4.0"
}
References

Affected packages

Julia / Xorg_libX11_jll

Package

Name
Xorg_libX11_jll
Purl
pkg:julia/Xorg_libX11_jll?uuid=4f6342f7-b3d2-589e-9d20-edeb45f2b2bc

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.6+0

Database specific

source 
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-469.json"