A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-Xwayland-devel | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xorg-nextserverUpgrade xorg-vfbserverUpgrade xwayland | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade tigervnc-selinux | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoNo solution existsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-server-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimal-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-module-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xwayland-develUpgrade xwaylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extra | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub