Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4r4-6hvf-34r8

Опубликовано: 30 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Ссылки

EPSS

Процентиль: 4%
0.00018
Низкий

7.3 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.3
ubuntu
3 месяца назад

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

CVSS3: 7.3
nvd
3 месяца назад

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

CVSS3: 7.1
msrc
3 месяца назад

Xorg: xmayland: value overflow in xkbsetcompatmap()

CVSS3: 7.3
debian
3 месяца назад

A flaw was identified in the X.Org X server\u2019s X Keyboard (Xkb) ex ...

CVSS3: 7.3
fstec
3 месяца назад

Уязвимость функции XkbSetCompatMap реализации протокола Wayland для X.Org XWayland и реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%
0.00018
Низкий

7.3 High

CVSS3

Дефекты

CWE-190