Out-of-bounds

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

Design/Logic Flaw

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service infinite loop via a reply in the 1 XRecordStartOfData, 2 XRecordEndOfData, or 3 XRecordClientDied category without a client sequence and with attached data...

CVE-2016-7953

Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string...

UBUNTU-CVE-2016-7948

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data...

CVE-2016-7950

CVE-2016-7950 concerns X.org libXrender prior to 0.9.10. The vulnerability allows a remote X server to trigger out-of-bounds writes via vectors involving filter name lengths in XRenderQueryFilters. Connected advisories and Nessus plugins corroborate the issue across multiple Linux/RHEL/AArch conf...

CVE-2016-7942

CVE-2016-7942 : X.Org libX11 contains an out-of-bounds read in XGetImage() (pre-1.6.4) that could allow a remote attacker to execute arbitrary code. Several vendor advisories confirm this vulnerability in libX11 and reference the same description. IBM bulletins for AMM/CMM report this CVE with th...

CVE-2016-7952

CVE-2016-7952 targets X.org libXtst before 1.2.3. The Wiki/NVD description notes a remote DoS: an X server can send a reply in the XRecordStartOfData / XRecordEndOfData / XRecordClientDied categories without a client sequence and with attached data, triggering an infinite loop. Connected sources ...

CVE-2016-7949

Public technical details about CVE-2016-7949 are not provided in the connected documents. The initial description notes buffer overflows in libXrender before 0.9.10, but no further specifics are included here. Monitor for updates.

CVE-2016-7946

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service infinite loop via vectors involving length fields...

CVE-2016-7945

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service out-of-bounds memory access or infinite loop via vectors involving length fields...

CVE-2016-7948

CVE-2016-7948 affects X.Org libXrandr prior to 1.5.1. The vulnerability arises from mishandling of reply data, allowing remote X servers to trigger out-of-bounds write operations. Several advisories confirm the issue and public fixes exist by upgrading to libXrandr 1.5.1 or newer (as reflected in...

CVE-2016-7948

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data...

CVE-2016-7944

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...

CVE-2016-7953

Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string...

CVE-2016-7944

CVE-2016-7944 : X.Org libXfixes before 5.0.3 on 32-bit platforms has an integer overflow in a length field (INT_MAX) that can cause a remote X server to desynchronize the client, potentially enabling privilege escalation or arbitrary code execution. Affected systems require upgrading to libXfixes...

CVE-2016-5407

The 1 XvQueryAdaptors and 2 XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data...

CVE-2016-7949

Multiple buffer overflows in the 1 XvQueryAdaptors and 2 XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields...

CVE-2016-7951

Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks...

CVE-2016-7946

CVE-2016-7946 affects X.Org libXi up to version 1.7.7, with a denial-of-service condition caused by out-of-bounds memory access / infinite loops triggered by vectors involving length fields. Public documents in Debian, Mageia, Gentoo, Fedora, IBM bulletin references indicate libXi as the vulnerab...

CVE-2016-5407

CVE-2016-5407 affects X.Org libXv prior to 1.0.11. The issue allows a remote X server to trigger out-of-bounds memory access via length-specification vectors in received data, potentially enabling arbitrary code execution or memory corruption as reported by multiple vendors. Affected software: X....