CVE-2025-26596
25.02.2025, 16:15
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| tigervnc | tigervnc | - |
| x.org | x_server | - |
| x.org | xwayland | - |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xorg |
| ||||||||||||
| xorg-hwe-16.04 |
| ||||||||||||
| xorg-hwe-18.04 |
| ||||||||||||
| xorg-server |
| ||||||||||||
| xorg-server-hwe-16.04 |
| ||||||||||||
| xorg-server-hwe-18.04 |
| ||||||||||||
| xwayland |
|
Common Weakness Enumeration
Vulnerability Media Exposure
References