x.org Vulnerability Advisory Catalog

Total 125 security vulnerabilities recorded for x.org software and firmware.

← Back to All Vendors
Component: x_server

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a He...

๐Ÿ“… 2026-07-08
CVSS 7.8 Dossier →
Component: x_server

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a h...

๐Ÿ“… 2026-07-08
CVSS 8.5 Dossier →
Component: x_server

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing w...

๐Ÿ“… 2026-06-05
CVSS 5.5 Dossier →
Component: x_server

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can rea...

๐Ÿ“… 2026-06-05
CVSS 5.5 Dossier →
Component: x_server

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a u...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those t...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] ...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbN...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger ...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum f...

๐Ÿ“… 2026-06-05
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An at...

๐Ÿ“… 2026-05-05
CVSS 6.1 Dossier →
Component: x_server

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()`...

๐Ÿ“… 2026-05-05
CVSS 6.1 Dossier →
Component: x_server

A flaw was discovered in the X.Org X serverโ€™s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data struct...

๐Ÿ“… 2025-10-30
CVSS 7.3 Dossier →
Component: x_server

A flaw was identified in the X.Org X serverโ€™s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an...

๐Ÿ“… 2025-10-30
CVSS 7.3 Dossier →
Component: x_server

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a ...

๐Ÿ“… 2024-02-09
CVSS 7.8 Dossier →
CVE-2023-6816 CRITICAL
Component: x_server

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can...

๐Ÿ“… 2024-01-18
CVSS 9.8 Dossier →
Component: x_server

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow whi...

๐Ÿ“… 2023-12-13
CVSS 7.6 Dossier →
Component: x_server

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup...

๐Ÿ“… 2023-10-25
CVSS 7.0 Dossier →
CVE-2023-5380 MEDIUM
Component: x_server

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup ...

๐Ÿ“… 2023-10-25
CVSS 4.7 Dossier →
Component: x_server

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data st...

๐Ÿ“… 2023-10-25
CVSS 7.8 Dossier →
Component: libxpm

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker t...

๐Ÿ“… 2023-10-10
CVSS 5.5 Dossier →
Component: libx11

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer...

๐Ÿ“… 2023-10-10
CVSS 7.8 Dossier →
Component: libx11

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available ...

๐Ÿ“… 2023-10-10
CVSS 5.5 Dossier →
Page 1 of 6 (125 Total Records)