A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-server-module | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwaylandUpgrade xorg-nextserverUpgrade xorg-vfbserver | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-develNo solution existsUpgrade tigervnc-debugsourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xwayland-devel | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub