Xwayland
0 remedies
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*
0 remedies
X.Org and Xwayland Buffer Overflow Vulnerability in Virtual Network Computing Component
Vulnerability
A buffer overflow vulnerability has been identified in X.Org and Xwayland, specifically within the TigerVNC suite. The issue arises in the XkbVModMaskText() function, where a fixed-sized buffer is allocated on the stack. The function then copies the names of virtual modifiers into this buffer without properly checking the data's size, leading to a buffer overflow condition.
Impact
Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to privilege escalation.
Remediation
Users can apply the available update for this vulnerability. Instructions for applying the update can be found in the Red Hat Product Errata RHSA-2025:2500, RHSA-2025:2502, RHSA-2025:2861, RHSA-2025:2862, RHSA-2025:2865, RHSA-2025:2880, RHSA-2025:2873, RHSA-2025:2874, RHSA-2025:2875, RHSA-2025:7163, RHSA-2025:7165, and RHSA-2025:7458.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
6.6impact
2.5exploitability
3.3remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.