Buffer Overflow Vulnerability in X.Org and Xwayland

CVE-2025-26595

Summary

A buffer overflow vulnerability exists in X.Org and Xwayland due to insufficient boundary checks in the XkbVModMaskText() function. This issue arises from the allocation of a fixed-size buffer on the stack, which becomes susceptible to overflow when copying virtual modifier names without verifying their lengths. An attacker could exploit this flaw to potentially execute arbitrary code or cause a denial of service.

References