Xorg X11 Server Xwayland Information Disclosure Vulnerability in XFIXES Extension

An information disclosure vulnerability has been identified in the XFIXES extension of the Xorg X11 server Xwayland. The issue arises because the XFixesSetClientDisconnectMode handler fails to validate the length of requests, which allows clients to access unintended memory containing residual data from previous requests.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information by allowing clients to read residual data from previous requests, potentially including confidential or private information.