libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving…

Out-of-bounds read in libXi's XI2 class parser

Out-of-bounds read in libXi's XListInputDevices() class parsing

Out-of-bounds read in libXi's XListInputDevices()

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

Out-of-bounds read in libXi's XQueryDeviceState()

Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index…

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the…

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1)…