Heap Overflow Vulnerability in X.Org and Xwayland
CVE-2025-26596

7.8HIGH

Key Information:

Vendor
Red Hat
Status
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
25 February 2025

Summary

A heap overflow flaw has been identified in X.Org and Xwayland due to improper handling of length calculations in the XkbSizeKeySyms() function. This vulnerability arises when the calculated size does not match the information written in the XkbWriteKeySyms() function, potentially resulting in a heap-based buffer overflow. Such an oversight may permit malicious actors to manipulate memory allocation, leading to unauthorized access or execution of arbitrary code within the affected systems.

References

https://access.redhat.com/security/cve/CVE-2025-26596
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2345256
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.