The vulnerability of the XCreateImage() function in the client-side API library for the X Window System, libX11, allows a hacker to execute arbitrary code.

🗓️ 17 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

XCreateImage vulnerability in the X window system library allows arbitrary code execution due to integer overflow.

Reporter	Title	Published	Views	Family All 233
GithubExploit	Exploit for Uncontrolled Resource Consumption in X.Org Libx11	16 Jan 202420:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	2 Feb 202414:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities	15 Apr 202502:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management	25 Jun 202520:04	–	ibm
Tenable Nessus	Amazon Linux 2023 : libXpm, libXpm-devel (ALAS2023-2023-382)	24 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libX11, libX11-common, libX11-devel (ALAS2023-2023-383)	24 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2023-2295)	20 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libX11 (ALAS-2023-2296)	20 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libX11 (ALAS-2023-2356)	4 Dec 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2024-2389)	9 Jan 202400:00	–	nessus

Vulners

Node

x.org xlib_(libx11)Range<1.8.7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

canonical ubuntuMatch23.04

Source	Link
access	www.access.redhat.com/security/cve/cve-2023-43787
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-43787
ubuntu	www.ubuntu.com/security/CVE-2023-43787
ubuntu	www.ubuntu.com/security/notices/USN-6407-1
ubuntu	www.ubuntu.com/security/notices/USN-6408-1
ubuntu	www.ubuntu.com/security/notices/USN-6407-2
vuldb	www.vuldb.com/ru/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023101026
gitlab	www.gitlab.freedesktop.org/xorg/lib/libx11/-/commit/7916869d16bdd115ac5be30a67c3749907aea6a0
gitlab	www.gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/91f887b41bf75648df725a4ed3be036da02e911e

19 Nov 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.2

CVSS 37.8

EPSS0.00461

XCreateImage vulnerability X window system integer overflow arbitrary code execution