A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XephyrUpgrade tigervnc-selinux | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervnc-server | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-commonUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-serverUpgrade xwaylandUpgrade xorg-nextserverUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsNo solution existsUpgrade tigervnc-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdk | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub