x.org Vulnerability Advisory Catalog

Total 125 security vulnerabilities recorded for x.org software and firmware.

← Back to All Vendors
Component: libx11

A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out...

📅 2023-10-10
CVSS 6.5 Dossier →
Component: libx11

A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided f...

📅 2023-06-28
CVSS 7.5 Dossier →
Component: x_server

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the composit...

📅 2023-03-30
CVSS 7.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInf...

📅 2023-03-27
CVSS 7.8 Dossier →
Component: libxpm

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, rel...

📅 2023-02-07
CVSS 8.8 Dossier →
Component: libxpm

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading t...

📅 2023-02-07
CVSS 7.5 Dossier →
Component: libxpm

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can le...

📅 2023-02-06
CVSS 7.5 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in ...

📅 2022-12-14
CVSS 7.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, res...

📅 2022-12-14
CVSS 8.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after i...

📅 2022-12-14
CVSS 8.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it h...

📅 2022-12-14
CVSS 8.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when i...

📅 2022-12-14
CVSS 8.8 Dossier →
Component: x_server

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corru...

📅 2022-12-14
CVSS 8.8 Dossier →
Component: x_server

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m o...

📅 2022-10-17
CVSS 3.5 Dossier →
Component: x_server

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of th...

📅 2022-10-17
CVSS 3.5 Dossier →
CVE-2022-3550 MEDIUM
Component: x_server

A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb...

📅 2022-10-17
CVSS 5.5 Dossier →
Component: x_server

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lac...

📅 2022-09-01
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the ...

📅 2022-09-01
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function...

📅 2021-12-17
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend fun...

📅 2021-12-17
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBar...

📅 2021-12-17
CVSS 7.8 Dossier →
Component: x_server

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs ...

📅 2021-12-17
CVSS 7.8 Dossier →
CVE-2021-31535 CRITICAL
Component: libx11

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request...

📅 2021-05-27
CVSS 9.8 Dossier →
Component: x_server

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take con...

📅 2021-05-26
CVSS 7.0 Dossier →
Page 2 of 6 (125 Total Records)