Vulnerabilities > CVE-2025-26596 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2025-02-25

Updated: 2025-05-08

Summary

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Tigervnc Tigervnc Tigervnc -	1
Application	X.Org X.Org X Server - X.Org X Server 1.0.1 X.Org X Server 1.0.2 X.Org X Server 1.0.99.2 X.Org X Server 1.0.99.901 X.Org X Server 1.0.99.902 X.Org X Server 1.0.99.903 X.Org X Server 1.1.0 X.Org X Server 1.1.1 X.Org X Server 1.1.99.901 X.Org X Server 1.1.99.902 X.Org X Server 1.1.99.903 X.Org X Server 1.2.0 X.Org X Server 1.2.99.0 X.Org X Server 1.2.99.901 X.Org X Server 1.2.99.902 X.Org X Server 1.2.99.903 X.Org X Server 1.2.99.904 X.Org X Server 1.2.99.905 X.Org X Server 1.3.0.0 X.Org X Server 1.3.99.0 X.Org X Server 1.3.99.2 X.Org X Server 1.4 X.Org X Server 1.4.0.90 X.Org X Server 1.4.1 X.Org X Server 1.4.2 X.Org X Server 1.4.99.901 X.Org X Server 1.4.99.902 X.Org X Server 1.4.99.904 X.Org X Server 1.4.99.905 X.Org X Server 1.4.99.906 X.Org X Server 1.5.0 X.Org X Server 1.5.1 X.Org X Server 1.5.2 X.Org X Server 1.5.3 X.Org X Server 1.5.99.1 X.Org X Server 1.5.99.2 X.Org X Server 1.5.99.3 X.Org X Server 1.5.99.901 X.Org X Server 1.5.99.902 X.Org X Server 1.5.99.903 X.Org X Server 1.6.0 X.Org X Server 1.6.1 X.Org X Server 1.6.1.901 X.Org X Server 1.6.1.902 X.Org X Server 1.6.2 X.Org X Server 1.6.2.901 X.Org X Server 1.6.3 X.Org X Server 1.6.3.901 X.Org X Server 1.6.4 X.Org X Server 1.6.4.901 X.Org X Server 1.6.5 X.Org X Server 1.6.99.900 X.Org X Server 1.6.99.901 X.Org X Server 1.6.99.902 X.Org X Server 1.6.99.903 X.Org X Server 1.7.0 X.Org X Server 1.7.0.901 X.Org X Server 1.7.0.902 X.Org X Server 1.7.1 X.Org X Server 1.7.1.901 X.Org X Server 1.7.1.902 X.Org X Server 1.7.2 X.Org X Server 1.7.3 X.Org X Server 1.7.3.901 X.Org X Server 1.7.3.902 X.Org X Server 1.7.4 X.Org X Server 1.7.4.901 X.Org X Server 1.7.4.902 X.Org X Server 1.7.5 X.Org X Server 1.7.5.901 X.Org X Server 1.7.5.902 X.Org X Server 1.7.6 X.Org X Server 1.7.6.901 X.Org X Server 1.7.6.902 X.Org X Server 1.7.7 X.Org X Server 1.7.99.1 X.Org X Server 1.7.99.2 X.Org X Server 1.7.99.901 X.Org X Server 1.7.99.902 X.Org X Server 1.8.0 X.Org X Server 1.8.0.901 X.Org X Server 1.8.0.902 X.Org X Server 1.8.1 X.Org X Server 1.8.1.901 X.Org X Server 1.8.1.902 X.Org X Server 1.8.2 X.Org X Server 1.8.99.901 X.Org X Server 1.8.99.902 X.Org X Server 1.8.99.903 X.Org X Server 1.8.99.904 X.Org X Server 1.8.99.905 X.Org X Server 1.8.99.906 X.Org X Server 1.9.0 X.Org X Server 1.9.0.901 X.Org X Server 1.9.0.902 X.Org X Server 1.9.1 X.Org X Server 1.9.2 X.Org X Server 1.9.2.901 X.Org X Server 1.9.2.902 X.Org X Server 1.9.3 X.Org X Server 1.9.3.901 X.Org X Server 1.9.3.902 X.Org X Server 1.9.4 X.Org X Server 1.9.4.901 X.Org X Server 1.9.5 X.Org X Server 1.9.99.901 X.Org X Server 1.9.99.902 X.Org X Server 1.9.99.903 X.Org X Server 1.10.0 X.Org X Server 1.10.0.901 X.Org X Server 1.10.0.902 X.Org X Server 1.10.1.901 X.Org X Server 1.10.1.902 X.Org X Server 1.10.2 X.Org X Server 1.10.2.901 X.Org X Server 1.10.2.902 X.Org X Server 1.10.3 X.Org X Server 1.10.3.901 X.Org X Server 1.10.3.902 X.Org X Server 1.10.4 X.Org X Server 1.10.6 X.Org X Server 1.10.99.901 X.Org X Server 1.10.99.902 X.Org X Server 1.11.0 X.Org X Server 1.11.1 X.Org X Server 1.11.1.901 X.Org X Server 1.11.1.902 X.Org X Server 1.11.2 X.Org X Server 1.11.2.901 X.Org X Server 1.11.2.902 X.Org X Server 1.11.3 X.Org X Server 1.11.3.901 X.Org X Server 1.11.3.902 X.Org X Server 1.11.4 X.Org X Server 1.11.99.1 X.Org X Server 1.11.99.2 X.Org X Server 1.11.99.901 X.Org X Server 1.11.99.902 X.Org X Server 1.11.99.903 X.Org X Server 1.12.0 X.Org X Server 1.12.0.901 X.Org X Server 1.12.0.902 X.Org X Server 1.12.1 X.Org X Server 1.12.1.901 X.Org X Server 1.12.1.902 X.Org X Server 1.12.2 X.Org X Server 1.12.2.901 X.Org X Server 1.12.2.902 X.Org X Server 1.12.3 X.Org X Server 1.12.3.901 X.Org X Server 1.12.3.902 X.Org X Server 1.12.4 X.Org X Server 1.12.99.901 X.Org X Server 1.12.99.903 X.Org X Server 1.12.99.904 X.Org X Server 1.12.99.905 X.Org X Server 1.13.0 X.Org X Server 1.13.0.901 X.Org X Server 1.13.0.902 X.Org X Server 1.13.1 X.Org X Server 1.13.1.901 X.Org X Server 1.13.2 X.Org X Server 1.13.2.901 X.Org X Server 1.13.2.902 X.Org X Server 1.13.3 X.Org X Server 1.13.4 X.Org X Server 1.13.99.901 X.Org X Server 1.14.0 X.Org X Server 1.14.1 X.Org X Server 1.14.1.901 X.Org X Server 1.14.2 X.Org X Server 1.14.2.901 X.Org X Server 1.14.2.902 X.Org X Server 1.14.3 X.Org X Server 1.14.4 X.Org X Server 1.14.4.901 X.Org X Server 1.14.5 X.Org X Server 1.14.6 X.Org X Server 1.14.7 X.Org X Server 1.14.99.1 X.Org X Server 1.14.99.2 X.Org X Server 1.14.99.3 X.Org X Server 1.14.99.901 X.Org X Server 1.14.99.902 X.Org X Server 1.14.99.903 X.Org X Server 1.14.99.904 X.Org X Server 1.14.99.905 X.Org X Server 1.15.0.901 X.Org X Server 1.15.99.901 X.Org X Server 1.15.99.902 X.Org X Server 1.15.99.903 X.Org X Server 1.15.99.904 X.Org X Server 1.16.0 X.Org X Server 1.16.1 X.Org X Server 1.16.1.901 X.Org X Server 1.16.2 X.Org X Server 1.16.2.901 X.Org X Server 1.16.3 X.Org X Server 1.16.4 X.Org X Server 1.16.99.901 X.Org X Server 1.16.99.902 X.Org X Server 1.17.0 X.Org X Server 1.17.1 X.Org X Server 1.17.2 X.Org X Server 1.17.3 X.Org X Server 1.17.4 X.Org X Server 1.17.99.901 X.Org X Server 1.17.99.902 X.Org X Server 1.18.0 X.Org X Server 1.18.1 X.Org X Server 1.18.2 X.Org X Server 1.18.3 X.Org X Server 1.18.4 X.Org X Server 1.18.99.2 X.Org X Server 1.18.99.901 X.Org X Server 1.18.99.902 X.Org X Server 1.19.0 X.Org X Server 1.19.1 X.Org X Server 1.19.2 X.Org X Server 1.19.3 X.Org X Server 1.19.4 X.Org X Server 1.19.5 X.Org X Server 1.19.6 X.Org X Server 1.19.7 X.Org X Server 1.19.99.901 X.Org X Server 1.19.99.902 X.Org X Server 1.19.99.903 X.Org X Server 1.19.99.904 X.Org X Server 1.19.99.905 X.Org X Server 1.20.1 X.Org X Server 1.20.2 X.Org X Server 1.20.3 X.Org X Server 1.20.4 X.Org X Server 1.20.5 X.Org X Server 1.20.6 X.Org X Server 1.20.7 X.Org X Server 1.20.8 X.Org X Server 1.20.9 X.Org X Server 1.20.10 X.Org X Server 1.20.11 X.Org X Server 1.20.12 X.Org X Server 1.20.13 X.Org X Server 1.20.14 X.Org X Server 21.0.99.1 X.Org X Server 21.0.99.901 X.Org X Server 21.0.99.902 X.Org X Server 21.1.0 X.Org X Server 21.1.1 X.Org X Server 21.1.2 X.Org X Server 21.1.3 X.Org X Server 21.1.4 X.Org X Server 21.1.5 X.Org X Server 21.1.6 X.Org X Server 21.1.7 X.Org X Server 21.1.8 X.Org X Server 21.1.9 X.Org X Server 21.1.10 X.Org X Server 21.1.11 X.Org X Server 21.1.12 X.Org X Server 21.1.13 X.Org Xwayland - X.Org Xwayland 21.0.99.901 X.Org Xwayland 21.0.99.902 X.Org Xwayland 21.1.0 X.Org Xwayland 21.1.1 X.Org Xwayland 21.1.2 X.Org Xwayland 21.1.3 X.Org Xwayland 21.1.4 X.Org Xwayland 22.0.99.901 X.Org Xwayland 22.0.99.902 X.Org Xwayland 22.1.0 X.Org Xwayland 22.1.1 X.Org Xwayland 22.1.2 X.Org Xwayland 22.1.3 X.Org Xwayland 22.1.4 X.Org Xwayland 22.1.5 X.Org Xwayland 22.1.6 X.Org Xwayland 22.1.7 X.Org Xwayland 22.1.8 X.Org Xwayland 22.1.9 X.Org Xwayland 23.0.99.901 X.Org Xwayland 23.0.99.902 X.Org Xwayland 23.1.0 X.Org Xwayland 23.1.1 X.Org Xwayland 23.1.2 X.Org Xwayland 23.1.99.901 X.Org Xwayland 23.1.99.902 X.Org Xwayland 23.2.0 X.Org Xwayland 23.2.1 X.Org Xwayland 23.2.2 X.Org Xwayland 23.2.3 X.Org Xwayland 23.2.4 X.Org Xwayland 23.2.5 X.Org Xwayland 23.2.6 X.Org Xwayland 23.2.7 X.Org Xwayland 24.0.99.901 X.Org Xwayland 24.0.99.902 X.Org Xwayland 24.1.0 X.Org Xwayland 24.1.1 X.Org Xwayland 24.1.2 X.Org Xwayland 24.1.3	302
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	3

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References