CVE-2026-88807

Published: September 24, 2026Last modified: October 23, 2026

Description

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Product	Release	Package	Status
Alpaquita Linux	23 LTS	libxrender	Unknown (0.9.11-r0)
	25 LTS	libxrender	Unknown (0.9.12-r0)
	Stream	libxrender	Fixed (0.9.13-r0)

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.