CVE-2026-121604

A flaw was found in wlroots. An out-of-bounds read vulnerability in the XWayland window manager component allows a local user to cause an information disclosure. By providing an improperly terminated window class property, an attacker can read beyond allocated memory and expose compositor heap da...

CVE-2026-121604

wlroots before 0.20.2 contains an out-of-bounds read vulnerability in readsurfaceclass in xwayland/xwm.c that allows local X11 clients to leak compositor heap memory. Attackers can set a WMCLASS property with a NUL-terminated instance but unterminated class, exposing over-read heap bytes as the...

CVE-2026-121604

The wlroots library (versions before 0.20.2 ) is vulnerable to an out-of-bounds read in the read_surface_class() function located in xwayland/xwm.c. This vulnerability occurs when a local X11 client sets a WM_CLASS property with a NUL-terminated instance but an unterminated class, which causes th...

EUVD-2026-116039

wlroots before 0.20.2 contains an out-of-bounds read vulnerability in readsurfaceclass in xwayland/xwm.c that allows local X11 clients to leak compositor heap memory. Attackers can set a WMCLASS property with a NUL-terminated instance but unterminated class, exposing over-read heap bytes as the...

CVE-2026-121604: wlroots: wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that…

wlroots before 0.20.2 contains an out-of-bounds read vulnerability in readsurfaceclass in xwayland/xwm.c that allows local X11 clients to leak compositor heap memory. Attackers can set a WMCLASS property with a NUL-terminated instance but unterminated class, exposing over-read heap bytes as the...

[SECURITY] Fedora 45 Update: wf-recorder-0.6.0-5.fc45

wf-recorder is a utility program for screen recording of wlroots-based compositors more specifically, those that support wlr-screencopy-v1 and xdg-output...

[SECURITY] Fedora 38 Update: wf-recorder-0.3.1-0.3.20221225gita9725f7.fc38

wf-recorder is a utility program for screen recording of wlroots-based compositors more specifically, those that support wlr-screencopy-v1 and xdg-output...