Out-of-Bounds Memory Read Vulnerability in X.Org Affecting Privileged Systems

CVE-2022-46344

What is CVE-2022-46344?

A vulnerability exists within the X.Org Server that relates to improper length validation in the handler for the XIChangeProperty request. This flaw can lead to out-of-bounds memory reads, posing a risk of information disclosure. Particularly concerning is the potential for local privilege escalation on systems where the X server operates with heightened permissions or during SSH X forwarding sessions, which may allow for remote code execution. Organizations using affected versions should take immediate action to mitigate the risks associated with this vulnerability.

References