Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h655-847g-q4f7

Опубликовано: 08 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

EPSS

Процентиль: 19%
0.00269
Низкий

8.5 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 8.5
ubuntu
23 дня назад

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

CVSS3: 7.5
redhat
24 дня назад

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

CVSS3: 8.5
nvd
23 дня назад

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

msrc
23 дня назад

xorg-server / xwayland glamor font atlas Heap Buffer Overflow

CVSS3: 8.5
debian
23 дня назад

Local attackers with a X connection able to provide PCX fonts to the X ...

EPSS

Процентиль: 19%
0.00269
Низкий

8.5 High

CVSS3

Дефекты

CWE-122