A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervnc-server-applet | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xephyrUpgrade xorg-nextserver | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimal | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-commonUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade tigervncUpgrade xorg-x11-server-XorgUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debugsourceNo solution exists | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-wayland | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub