umbra

Umbra An external overlay for THE FINALS on Linux. It reads the game's memory from a separate process, draws a transparent click-through window on top of it, and provides an aim assist and a triggerbot. Nothing is injected into the game and nothing is ever written back; the tool reads memory and...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the Big Requests extension. The length of the request is multiplied by 4 before checking against the maximum allowed size, which may lead to an integer overflow and bypassing the size check...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the handling of animated cursors by the X Rendering extension. If a client does not provide any cursors, the server assumes that at least one is present. This can lead to an out-of-bounds read and potential crash...

Astra Linux – Vulnerability in xwayland, xorg-server

A buffer overflow vulnerability was discovered in X.Org and Xwayland. If the XkbChangeTypesOfKey function is called with a value of 0 for the “groups” parameter, it will resize the key symbol table to 0, but leave the key actions unchanged. If the same function is called later with a non-zero val...

Astra Linux – Vulnerability in xorg-server

A use-after-free flaw was discovered in the X.Org X server and Xwayland in the CreateSaverWindow function. A client can trigger a use-after-free error after changing window attributes and forcing the screen saver, resulting in information disclosure...

Astra Linux – Vulnerability in xorg-server

A out-of-bounds read flaw was discovered in the X.Org X server and Xwayland within the glXDispChangeDrawableAttributes function. A incorrect size validation check allows a client-controlled number of bytes to be read, exceeding the request buffer, resulting in information disclosure. A write path...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X server’s request handling. A non-zero value for “bytes to ignore” in a client’s request can cause the server to skip processing another client’s request, potentially leading to a denial of service...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when calculating the request length, allowing a client to bypass the length checks...

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was discovered in X.Org and Xwayland. When a device is removed while it is still frozen, the events queued for that device remain active even after the device is freed. Playing back those events will lead to a use-after-free...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can result in dangling pointers, leading to a use-after-free condition. This can cause memory corruption or a system crash, potentiall...

Astra Linux – Vulnerability in xwayland, xorg-server

A use-after-free flaw was identified in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, modifying the trigger values as required. Eventually, the SyncInitTrigger function is called. If one of these changes causes an error, the function...

Astra Linux – Vulnerability in xorg-server

A use-after-free flaw was discovered in the X.Org X server and Xwayland within the FreeCounter function. A client that sets up multiple SyncCounters and waits for those triggers can trigger a use-after-free when destroying those counters through a second client connection. This could potentially...

Astra Linux – Vulnerability in xwayland, xorg-server

A heap overflow flaw was discovered in X.Org and Xwayland. The calculation of the length in XkbSizeKeySyms differs from what is stored in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...

Astra Linux – Vulnerability in xorg-server

A use-after-free flaw was identified in the X.Org X server and Xwayland within the miSyncDestroyFence function. A client that sets up multiple fence triggers may trigger a use-after-free function pointer call. An attacker could connect to the X server to set up a fence and wait for it, then anoth...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the RandR extension, where the RRChangeProviderProperty function does not properly validate inputs. This issue leads to an integer overflow when calculating the total size to allocate...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw related to accessing an uninitialized pointer was discovered in X.Org and Xwayland. The compCheckRedirect function may fail if it cannot allocate the backing pixmap. In such cases, compRedirectWindow will return a BadAlloc error without validating the window tree just before processing; as...

Astra Linux – Vulnerability in xwayland, xorg-server

A buffer overflow vulnerability was discovered in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and will copy the data regardless of the siz...

Astra Linux – Vulnerability in xorg-server, xwayland

A flaw was discovered in the X.org server. Due to an improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition through a specially crafted payload. This could lead to denial of service or local privilege escalation in distributions...

Astra Linux – Vulnerability in xorg-server

A stack-based buffer overflow vulnerability was discovered in the X.Org X server and Xwayland. The XkbSetMapChecks function declares a fixed-size stack buffer, mapWidths256, indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a position controlled by the client,...

NewStart CGSL MAIN 7.02 : xorg-x11-server-Xwayland Vulnerability (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server-Xwayland packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer...