X.Org X Server and Xwayland Use-After-Free Vulnerability in X11 Present Extension Handling

Vulnerability

A use-after-free vulnerability has been identified in the X.Org X server and Xwayland. This issue arises in the X11 Present extension when processing notifications related to presentation events. Improper error handling can create dangling pointers, leading to a use-after-free condition. As a result, memory corruption or crashes may occur, with the potential for an attacker to execute arbitrary code or cause a denial-of-service condition. This vulnerability has existed since Xorg version 1.15.

Impact

Exploitation of this vulnerability can result in memory corruption or a crash, with the potential for arbitrary code execution. Additionally, the vulnerability can cause a denial-of-service condition by crashing the application or causing it to exit or restart.

Added: Oct 30, 2025, 6:18 AM
Updated: Oct 30, 2025, 6:18 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
10.0
exploitability
4.9
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.