A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-devel | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xdmx | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-serverUpgrade xwaylandUpgrade xephyrUpgrade xorg-nextserver | Jul 2, 2025 | Jul 1, 2025 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade tigervnc-selinuxUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade tigervnc | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceNo solution exists | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xwayland-develUpgrade xorg-x11-server-sdk | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwaylandUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub