Buffer Overflow Vulnerability in X.Org and Xwayland Products

CVE-2025-26597

Summary

A vulnerability exists within X.Org and Xwayland due to a buffer overflow flaw triggered by the function XkbChangeTypesOfKey(). When invoked with a specific group value of 0, it incorrectly resizes the key symbols table while leaving the key actions unchanged. This mismatch leads to potential buffer overflow issues if the function is subsequently called with a non-zero group value, as the key actions will not align with the resized key symbols table, resulting in unintended behavior or memory corruption.

References