Security Bulletin: AIX Xorg X Server is vulnerable to memory corruption or a denial of service (CVE-2025-62230, CVE-2025-62231)

Summary Updated Feb 24 2026: New iFix for 7.3 TL3 SP2 provided with correct fileset prereqs. Updated the affected fileset levels to show that 7.3 TL3 SP2 is vulnerable. Vulnerabilities in Xorg X Server could cause a memory corruption or denial of service CVE-2025-62230, CVE-2025-62231...

AIX Xorg X Server is vulnerable to memory corruption or a denial of service (CVE-2025-62230 CVE-2025-62231)

IBM SECURITY ADVISORY First Issued: Thu Feb 19 16:07:09 CST 2026 |Updated: Tue Feb 24 10:50:50 CST 2026 |Update: New iFix for 7.3 TL3 SP2 provided with correct fileset prereqs. | Updated the affected fileset levels to show that 7.3 TL3 SP2 is | vulnerable. The most recent version of this document...

MiracleLinux 8 : userspace graphics, xorg-x11, and mesa, xorg-x11-server-1.20.10-1.el8 (AXSA:2021-2100:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2100:01 advisory. xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 xorg-x11-server: Integer underflow in the X input extension protocol...

MiracleLinux 3 : xorg-x11-server-1.1.1-48.101.1.0.1.AXS3 (AXSA:2013-665:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-665:02 advisory. X.Org X11 X server Security issues fixed with this release: CVE-2013-4396 Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the...

MiracleLinux 3 : xorg-x11-server-1.1.1-48.90.0.1.AXS3 (AXSA:2012-271:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-271:01 advisory. X.Org X11 X server Security issues fixed with this release: CVE-2011-4028 No information available at the time of writing, please refer to the CVE links below...

MiracleLinux 3 : xorg-x11-server-1.1.1-48.26.5.3AXS3 (AXSA:2008-80:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-80:01 advisory. X.Org is an open source implementation of the X Window System. It provides basic low-level functionality that full-fledged graphical user interfaces a...

CVE-2010-0504

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-1999-0526

An X server's access control is disabled e.g. through an "xhost +" command and allows anyone to connect to the server...

CVE-1999-0413

A buffer overflow in the SGI X server allows local users to gain root access through the X server font path...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

xorg: xmayland: Value overflow in XkbSetCompatMap()

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-990941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990941 advisory. A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can lea...

TencentOS Server 2: tigervnc (TSSA-2025:0557)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0557 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0173: tigervnc (ALINUX3-SA-2025:0173)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0173 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-62229: A flaw was found in the...