Buffer Overflow Vulnerability in X.org LibXi Affected by Unexpected Sign Extension

CVE-2013-1995

What is CVE-2013-1995?

The vulnerability in X.org's LibXi, present in version 1.7.1 and prior, allows X servers to trigger memory allocation errors leading to a buffer overflow. This occurs due to an unexpected sign extension in the XListInputDevices function, potentially compromising system stability and security. Attackers may exploit this flaw to manipulate memory allocation, resulting in unauthorized actions within the system.

References