Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-26595

Опубликовано: 25 фев. 2025
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
Версия до 21.1.16 (исключая)
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*
Версия до 24.1.6 (исключая)
Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00052
Низкий

7.8 High

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
10 месяцев назад

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

CVSS3: 7.8
redhat
10 месяцев назад

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

CVSS3: 7.8
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 7.8
debian
10 месяцев назад

A buffer overflow flaw was found in X.Org and Xwayland. The code in Xk ...

suse-cvrf
10 месяцев назад

Security update for libxkbfile

EPSS

Процентиль: 16%
0.00052
Низкий

7.8 High

CVSS3

Дефекты

CWE-121
CWE-787