CVE-2016-5407

CVE-2016-5407 affects X.Org libXv prior to 1.0.11. The issue allows a remote X server to trigger out-of-bounds memory access via length-specification vectors in received data, potentially enabling arbitrary code execution or memory corruption as reported by multiple vendors. Affected software: X....

CVE-2016-7953

CVE-2016-7953 affects X.Org libXvMC up to version 1.0.9. A buffer underflow occurs when an empty string is received from the X server, enabling remote X servers to potentially trigger arbitrary code execution. Public advisories converge on upgrading to libXvMC 1.0.10 or later to remediate. Additi...

CVE-2016-7947

CVE-2016-7947 affects X.Org libXrandr. Multiple integer overflows in libXrandr before 1.5.1 can be exploited by remote X servers to trigger out-of-bounds write operations through a crafted response. Public advisories and vendor pages (e.g., Fedora libXrandr 1.5.1, Debian libXrandr fixes, Mageia n...

CVE-2016-7952

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service infinite loop via a reply in the 1 XRecordStartOfData, 2 XRecordEndOfData, or 3 XRecordClientDied category without a client sequence and with attached data...

CVE-2016-7945

CVE-2016-7945 concerns multiple integer overflows in X.Org libXi prior to 1.7.7 that allow a remote X server to trigger a denial of service via vectors involving length fields. The vulnerability can cause out-of-bounds memory access or an infinite loop, enabling a remote attacker to degrade avail...

CVE-2016-7943

CVE-2016-7943 is a vulnerability in X.Org libX11 (pre-1.6.4) where the XListFonts length field handling can trigger an out-of-bounds write, potentially allowing remote X servers to gain privileges. Related entry CVE-2016-7942 covers out-of-bounds reads (XGetImage) in the same library. These issue...

CVE-2016-7951

CVE-2016-7951 affects the X.org libXtst library prior to version 1.2.3. The issue is caused by multiple integer overflows due to insufficient range checks, which can enable a remote X server to trigger out-of-bounds memory access. The vulnerability impact is described as partial confidentiality/i...

CVE-2016-7943

The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations...

CVE-2016-7950

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

CVE-2016-7942

The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations...

CVE-2016-7944

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...

CVE-2016-7946

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service infinite loop via vectors involving length fields...

CVE-2016-7951

Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks...

CVE-2016-5407

The 1 XvQueryAdaptors and 2 XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data...

CVE-2016-7943

The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations...

CVE-2016-7945

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service out-of-bounds memory access or infinite loop via vectors involving length fields...

CVE-2016-7947

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response...

CVE-2016-7948

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data...

CVE-2016-7950

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

CVE-2016-7952

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service infinite loop via a reply in the 1 XRecordStartOfData, 2 XRecordEndOfData, or 3 XRecordClientDied category without a client sequence and with attached data...