Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-26598

Опубликовано: 25 фев. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
focal

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
oracular

not-affected

code not present
plucky

not-affected

code not present
upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

code not present
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

released

2:21.1.16-1ubuntu1
esm-infra-legacy/trusty

needs-triage

esm-infra/bionic

released

2:1.19.6-1ubuntu4.15+esm12
esm-infra/focal

not-affected

2:1.20.13-1ubuntu1~20.04.19
esm-infra/xenial

released

2:1.18.4-0ubuntu0.12+esm17
focal

released

2:1.20.13-1ubuntu1~20.04.19
jammy

released

2:21.1.4-2ubuntu1.7~22.04.13
noble

released

2:21.1.12-1ubuntu1.2
oracular

released

2:21.1.13-2ubuntu1.2
plucky

released

2:21.1.16-1ubuntu1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

DNE

esm-infra/xenial

released

2:1.19.6-1ubuntu4.1~16.04.6+esm9
focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

released

2:1.20.8-2ubuntu2.2~18.04.11+esm4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

released

2:24.1.5-1ubuntu1
esm-infra/focal

DNE

focal

DNE

jammy

released

2:22.1.1-1ubuntu0.17
noble

released

2:23.2.6-1ubuntu0.4
oracular

released

2:24.1.2-1ubuntu0.4
plucky

released

2:24.1.5-1ubuntu1
upstream

released

24.1.6

Показывать по

EPSS

Процентиль: 11%
0.0004
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
5 месяцев назад

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

CVSS3: 7.8
nvd
5 месяцев назад

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

CVSS3: 7.8
msrc
5 месяцев назад

Описание отсутствует

CVSS3: 7.8
debian
5 месяцев назад

An out-of-bounds write flaw was found in X.Org and Xwayland. The funct ...

CVSS3: 7.8
github
5 месяцев назад

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

EPSS

Процентиль: 11%
0.0004
Низкий

7.8 High

CVSS3

Уязвимость CVE-2025-26598