Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wv34-xcj8-f3mq

Опубликовано: 25 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

EPSS

Процентиль: 29%
0.00369
Низкий

7.8 High

CVSS3

Дефекты

CWE-824

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 1 года назад

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

CVSS3: 7.8
redhat
больше 1 года назад

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

CVSS3: 7.8
nvd
больше 1 года назад

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.

CVSS3: 7.8
msrc
больше 1 года назад

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

CVSS3: 7.8
debian
больше 1 года назад

An access to an uninitialized pointer flaw was found in X.Org and Xway ...

EPSS

Процентиль: 29%
0.00369
Низкий

7.8 High

CVSS3

Дефекты

CWE-824