CVE-2024-0409

CVE-2024-0409 is part of multiple xorg-x11-server advisories (ALSA/ALAS2/CentOS) affecting X.Org X server components. Connected documents specify concrete CVEs and affected packages: CVE-2023-6816 (Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer), CVE-2024-0229 (reattaching to dif...

CVE-2023-6816

The CVE-2023-6816 issue affects the X.Org Server (xorg-x11-server) and stems from a heap overflow in DeviceFocusEvent and ProcXIQueryPointer due to allocating space only for the device’s button count; extra bits (up to 255) can cause overflow when bigger values are used. This impacts X.Org Server...

CVE-2024-0408

CVE-2024-0408 affects the xorg-x11-server (X.Org server). The GLX PBuffer code omits the XACE hook during buffer creation, leaving the object unlabeled; subsequent access (e.g., GetGeometry) or creation of related resources (e.g., GC) can cause the SELinux XSELINUX path to use an unlabelled objec...

CVE-2024-0229

CVE-2024-0229 affects the X.Org server (xorg-x11-server). The flaw is an out-of-bounds memory access triggered when a device frozen by a sync grab is reattached to a different master device, potentially causing an application crash, local privilege escalation, or remote code execution in SSH X11 ...

CVE-2023-0494

The CVE-2023-0494 entry concerns X.Org X server: a dangling pointer in DeepCopyPointerClasses can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read/write freed memory, enabling local privilege elevation on privileged X servers and remote code execution for SSH X forwarding...

CVE-2020-14347

CVE-2020-14347 affects the X.Org X server (xorg-server): a flaw that leaks uninitialized heap memory from the server to clients, potentially enabling information disclosure and, in elevated-privilege setups, ASLR bypass. Affected releases include Xorg-server prior to a patched version; multiple a...

CVE-2020-14361

Concrete detail from connected docs confirms CVE-2020-14361 affects X.Org Server (xorg-x11-server). The flaw is an Integer underflow in the XkbSelectEvents path that leads to a heap-buffer overflow and a privilege-escalation impact (data confidentiality, integrity, availability). Multiple vendor ...

CVE-2020-14345

CVE-2020-14345 affects the X.Org/Xorg-X11-Server (xorg-x11-server). The root cause is an Out-of-Bounds access in the XkbSetNames function, potentially enabling privilege escalation. The vulnerability is described as impacting confidentiality, integrity, and availability, with local attack vector ...

CVE-2020-14346

CVE-2020-14346 affects xorg-x11-server prior to 1.20.9. The X.Org Server’s X input extension protocol decoding has an integer underflow that may lead to arbitrary memory access, impacting confidentiality, integrity, and availability. The connected documents confirm the vulnerability and reference...

CVE-2018-14665

The CVE-2018-14665 issue affects the X.Org X server (xorg-server) prior to 1.20.3. A flaw in command-line parameter validation allows unprivileged users who can access the system’s physical console to escalate to root by exploiting -modulepath or -logfile handling when the X server runs with setu...

CVE-2020-14362

CVE-2020-14362 concerns X.Org Server prior to xorg-x11-server 1.20.9, where an integer underflow can trigger a heap-buffer overflow, enabling privilege escalation. The impact is described as affecting confidentiality, integrity, and availability. Evidence across connected sources ties this CVE to...

CVE-2020-25712

Affected software: xorg-x11-server (before 1.20.10). Vulnerable component/function: XkbSetDeviceInfo in the XKB code, with a heap-based buffer overflow leading to privilege escalation. Exploitation/impact: local attacker could exploit this to escalate privileges and impact confidentiality, integr...

CVE-2020-14360

The CVE-2020-14360 vulnerability affects the X.Org Server (XKB Xserver extension). It stems from an out-of-bounds access in XkbSetMap, which may allow privilege escalation and impact confidentiality, integrity, and availability. Public advisories (e.g., Arch Linux ASA-202012-6 and AlmaLinux 2021 ...

CVE-2021-3472

CVE-2021-3472 affects xorg-x11-server and related packages up to version before 1.20.11. The root cause is an integer underflow in the X server component (notably XChangeFeedbackControl) that can lead to local privilege escalation, with potential impact to confidentiality, integrity, and availabi...

CVE-2023-5367

CVE-2023-5367 is an out-of-bounds write in xorg-x11-server, caused by an incorrect calculation of a heap buffer offset in XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrproperty.c). Affects the xorg-x11-server component across multiple Linux distributions; can lead t...

CVE-2021-4010

CVE-2021-4010 affects xorg-x11-server (X.Org X server) with an out-of-bounds access in the SProcScreenSaverSuspend function in versions before 21.1.2 and before 1.20.14. This vulnerability could impact confidentiality, integrity, and availability. The issue is mitigated by upgrading to the fixed ...

CVE-2023-1393

Concretely, CVE-2023-1393 affects the X.Org Server Overlay Window vulnerability in xorg-x11-server (and Xwayland variants) due to a use-after-free from destroying the compositor overlay window, leaving a dangling CompScreen pointer and enabling local privilege escalation. Affected packages includ...

CVE-2023-5380

CVE-2023-5380 is a use-after-free in the xorg-x11-server (DestroyWindow path) that can crash the X server in Zaphod mode (multi-screen with multiple protocol screens). The issue is reported within the same family of xorg-x11-server memory-safety bugs, with the given CVSSv3.1 vector indicating Loc...

CVE-2021-4009

Affected software: xorg-x11-server (versions before 21.1.2 and before 1.20.14). Fault: out-of-bounds access in SProcXFixesCreatePointerBarrier. Impact: potential data confidentiality, integrity, and availability compromise. Status: fixed in updated releases (e.g., 21.1.2 and 1.20.14 lineage) per ...

CVE-2021-4011

The CVE CVE-2021-4011 affects xorg-x11-server prior to versions 21.1.2 and 1.20.14, due to an out-of-bounds access in SwapCreateRegister. This vulnerability can impact data confidentiality, integrity, and system availability. Remediation: upgrade to xorg-x11-server 21.1.2 or 1.20.14 (and later) p...

CVE-2023-6478

CVE-2023-6478 affects the X.Org X server (xorg-server). A flaw in handling RRChangeOutputProperty and RRChangeProviderProperty can trigger an integer overflow, potentially leading to disclosure of sensitive information. Connected advisories (e.g., Red Hat/AlmaLinux errata) corroborate the vulnera...

CVE-2023-6377

CVE-2023-6377 affects xorg-x11-server (XKB button actions) with out-of-bounds memory reads/writes. The flaw can enable local privilege escalation or remote code execution in scenarios involving X11 forwarding. Affected components cited across multiple advisories include xorg-server and related X1...

CVE-2021-4008

The CVE-2021-4008 entry concerns xorg-x11-server with an out-of-bounds access in SProcRenderCompositeGlyphs. Affected versions are those before 21.1.2 and before 1.20.14. The vulnerability can impact data confidentiality, integrity, and availability; the highest impact is indicated for all three,...

CVE-2025-26601

CVE-2025-26601 is a use-after-free in Xorg/Xwayland (SyncInitTrigger) when changing an alarm, potentially allowing use-after-free when the alarm triggers. Affected: xorg-x11-server-Xwayland (and related Xorg/Xwayland components). Remediation: apply the updated Xwayland/Xorg packages as described ...

CVE-2025-26594

CVE-2025-26594 is a use-after-free in X.Org/Xwayland where the root cursor is kept as a global in the X server; freeing the root cursor can reference freed memory, causing a crash or compromise. Affected package: xorg-x11-server-Xwayland (and related Xorg/Xwayland components in advisories). Impac...

CVE-2025-26600

CVE-2025-26600 is a use-after-free in X.Org/Xwayland. The issue occurs when a device is removed while still frozen, leaving queued events that, when replayed after the device is freed, trigger use-after-free. Connected advisories confirm Xwayland/xorg involvement and list related fixes across Xwa...

CVE-2025-26599

CVE-2025-26599 (X.Org / Xwayland) : An access to an uninitialized pointer flaw exists in compRedirectWindow() when compCheckRedirect() cannot allocate backing pixmap, causing BadAlloc and partly initialized validated data. This affects X.Org/Xwayland components and is listed in multiple advisorie...

CVE-2025-26597

CVE-2025-26597 affects X.Org/Xwayland. A buffer overflow can occur when XkbChangeTypesOfKey() is called first with a 0 group (resizing the key symbols table) and then with a non‑zero group (actions remain the wrong size). This is tied to the heap/buffer handling in XkbChangeTypesOfKey() and is re...

CVE-2025-26595

CVE-2025-26595 is a buffer overflow in X.Org/Xwayland where XkbVModMaskText() uses a fixed-size stack buffer without proper bounds checking. The issue affects Xorg-x11-server-Xwayland. Advisories indicate a fix is available in newer package releases (e.g., Xwayland/Xorg servers updated to 24.1.3 ...

CVE-2025-26596

CVE-2025-26596 is a heap/buffer overflow in X.Org/Xwayland affecting XkbWriteKeySyms() due to a mismatch with XkbSizeKeySyms() that can lead to a heap-based overflow. Connected advisories (Astra Linux and various Amazon Linux advisories for xorg-x11-server-Xwayland/Xorg) confirm the issue and lis...

CVE-2025-26598

CVE-2025-26598 is an out-of-bounds write in X.Org/Xwayland. The GetBarrierDevice() lookup returns the last list element when no match is found, potentially causing out-of-bounds memory access in the barrier/pointer handling path (CreatePointerBarrierClient()). This affects xorg-x11-server-Xwaylan...

CVE-2022-3550

CVE-2022-3550 affects the X.Org Server; the vulnerability is a buffer overflow in the _GetCountedString function in xkb/xkb.c. Exploitation details are not provided in the initial docs, but multiple advisories (ALSA/ALAS, CentOS/RHEL, Fedora references) note a patch/update is available to fix the...

CVE-2017-12176

The CVE-2017-12176 issue affects xorg-server prior to version 1.19.5. It stems from missing extra length validation in ProcEstablishConnection, enabling a malicious X client to crash the X server and potentially execute arbitrary code. Documents from Debian, Arch Linux, and other vendors (e.g., D...

CVE-2017-12178

CVE-2017-12178 affects xorg-server (Xi component) due to an invalid/incorrect length check in ProcXIChangeHierarchy. Exploitation could crash the X server or allow arbitrary code execution. Public advisories and CVE trackers show impact on xorg-server prior to version 1.19.5. Remediation across m...

CVE-2017-12181

CVE-2017-12181 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The vulnerability arises from missing length validation in the XFree86 DGA extension, which can cause the X server to crash and potentially allow arbitrary code execution by a malicious X client. Public documents...

CVE-2017-12184

CVE-2017-12184 affects the X.Org X server (xorg-x11-server) prior to version 1.19.5. The root cause is a missing length validation in the XINERAMA extension, which could allow a malicious X client to crash the X server or potentially execute arbitrary code. Public sources in the connected documen...

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

CVE-2017-12177

CVE-2017-12177 affects xorg-server prior to 1.19.5. The vulnerability arises from an integer overflow in ProcDbeGetVisualInfo, allowing a remote/local X server client to cause a crash or potentially execute arbitrary code. Public advisories (Debian, Arch Linux, Gentoo, Mageia, etc.) indicate the ...

CVE-2017-12183

CVE-2017-12183 affects xorg-server before 1.19.5. The XFIXES extension mishandled buffer/length validation, allowing a malicious X client to crash the X server or possibly execute arbitrary code. Impact cited as denial of service or arbitrary code execution when an X client connects (remote/local...

CVE-2017-12186

CVE-2017-12186 affects xorg-x11-server prior to 1.19.5. The X-Resource extension lacked proper length validation, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Multiple connected advisories corroborate this vulnerability in Xorg/Xserver suites and refe...

CVE-2017-12187

CVE-2017-12187 affects xorg-x11-server before 1.19.5, where the RENDER extension lacked proper length validation. This weakness can allow a malicious X client to crash the X server or potentially execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2017-12187...

CVE-2017-12179

CVE-2017-12179 affects xorg-x11-server prior to 1.19.5. It is caused by an integer overflow in the (S)ProcXIBarrierReleasePointer functions, enabling a malicious X client to crash the X server or possibly execute arbitrary code. Several advisories and Nessus plugins corroborate this issue across ...

CVE-2022-3551

CVE-2022-3551 affects X.Org Server; the memory leak is in ProcXkbGetKbdByName() in xkb/xkb.c. The provided documents consistently reference this CVE alongside related xorg-server issues (memory leak/cves 3550, 4283, etc.) and show that advisories from AlmaLinux, Amazon Linux, CentOS/RHEL, and Fed...

CVE-2017-12185

CVE-2017-12185 affects the X.Org X server (xorg-x11-server) prior to 1.19.5. The vulnerability is due to missing length validation in the MIT-SCREEN-SAVER extension, which can cause the X server to crash or potentially allow arbitrary code execution when processed by a malicious X client. The pro...

CVE-2017-12180

CVE-2017-12180 affects xorg-x11-server before 1.19.5 due to missing length validation in XFree86 VidModeExtension, allowing a malicious X client to crash the X server or possibly execute arbitrary code.

CVE-2017-12182

CVE-2017-12182 affects the X.Org X server (xorg-x11-server) before 1.19.5. The root cause is missing length validation in the XFree86 DRI extension, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Affected software is the xorg-x11-server package prior to...

CVE-2026-55999

CVE-2026-55999 affects xorg-server (before 21.2.24) and xwayland (before 24.1.13). A local attacker with a X connection can trigger a heap buffer overflow in glamor font atlas via SetFont due to missing glyph boundary checks. Impact is a potential heap corruption, with high likelihood of exploita...

CVE-2026-50256

The CVE affects the X.Org X server and Xwayland. A mismatch between the server and libXfont2 regarding maximum font name length (server-allocated 256-byte stack buffer vs libXfont2 name length up to 1024 bytes) allows a font alias name of 257–1023 bytes to overflow the stack during alias resoluti...

CVE-2026-50258

The CVE affects the X.Org X server and Xwayland. A stack-based buffer overflow arises from unchecked key-type shift levels in XkbKeyTypes: multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups are not clamped by CheckKeyTypes(), allowing a client to set excessive shift levels and trigge...

CVE-2026-50261

The CVE-2026-50261 entry describes a use-after-free in the X.Org X server and Xwayland related to SyncChangeCounter(). A client that creates multiple SyncCounters can trigger a use-after-free when those counters are destroyed via a second client connection during a change, potentially crashing th...