A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 20, 2026 | Sep 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libX11-develUpgrade libX11-commonUpgrade libX11-debuginfoUpgrade libX11 | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade libX11Upgrade libX11-xcb-debuginfoUpgrade libX11-debugsourceUpgrade libX11-develUpgrade libX11-commonUpgrade libX11-xcbUpgrade libX11-debuginfo | Oct 13, 2026 | Sep 21, 2026 |
| Redhat_linux | — | No solution exists | Sep 24, 2026 | Sep 21, 2026 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-6 (Ubuntu Pro) | Oct 12, 2026 | Sep 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub