A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-source | Mar 18, 2025 | Feb 25, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Feb 25, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland | Mar 26, 2025 | Feb 25, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfo | Mar 27, 2025 | Feb 25, 2025 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Mar 3, 2025 | Feb 25, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xwaylandUpgrade xorg-nextserverUpgrade xorg-vfbserver | Mar 7, 2025 | Mar 6, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Jul 11, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xorg-x11-server-help | Jun 13, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xorg-x11-server-help | Jul 21, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade xorg-x11-server-help | Jul 1, 2025 | Feb 25, 2025 |
| Oracle_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Mar 12, 2025 | Feb 25, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debuginfoNo solution existsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xdmx | Mar 11, 2025 | Feb 25, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-Xdmx-debuginfo | May 8, 2025 | Feb 25, 2025 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade libX11-devel-docUpgrade libx11-xcb1Upgrade xorg-x11-server-extraUpgrade libx11-6Upgrade xwayland-develUpgrade libx11-dataUpgrade libx11-6-32bitUpgrade libx11-xcb1-32bitUpgrade libx11-devel-32bitUpgrade libx11-develUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-source | Mar 3, 2025 | Feb 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Feb 26, 2025 | Feb 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub