Read the docs
TI-2025-31247 Aliases CVE-2025-49180GHSA-gpcr-p5wh-5x85

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Priority LOW 34CWE-190Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 26 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00332 26th percentileScored 2026-11-07
Fix Partial xwayland (X.Org): 24.1.7Red Hat: 28 advisoriesRed Hat: 26 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
x.orgxwaylandbefore 24.1.724.1.7Patch availableCNA
Red HatRed Hat Enterprise Linux 10—24.1.5-4.el10_0Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION—1.1.0-25.el6_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 7.7 Advanced Update Support—1.8.0-17.el7_7.1Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.20.4-32.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.8.0-36.el7_9.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.20.11-26.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—21.1.3-18.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.15.0-7.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.9.0-15.el8_2.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.20.6-4.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.20.10-2.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.11.0-8.el8_4.13Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—1.20.10-2.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—1.11.0-8.el8_4.13Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—1.12.0-15.el8_8.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—1.12.0-15.el8_8.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.20.11-31.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9—23.2.7-4.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.14.1-8.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—21.1.3-3.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—1.20.11-11.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—1.11.0-22.el9_0.15Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—21.1.3-8.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—1.20.11-18.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—1.12.0-14.el9_2.12Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—22.1.9-6.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—1.20.11-26.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—1.13.1-8.el9_4.7Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • xwayland Vendorx.org Affected before 24.1.7 Fixed in 24.1.7 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 24.1.5-4.el10_0 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 1.1.0-25.el6_10.1 Patch available CNA
  • Red Hat Enterprise Linux 7.7 Advanced Update Support VendorRed Hat Affected — Fixed in 1.8.0-17.el7_7.1 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.20.4-32.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.8.0-36.el7_9.2 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.20.11-26.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 21.1.3-18.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.15.0-7.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.14 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.20.6-4.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.20.10-2.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.13 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.20.10-2.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.13 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.14 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.14 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.20.11-31.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.2.7-4.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.14.1-8.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-3.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-11.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.11.0-22.el9_0.15 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-8.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-18.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-14.el9_2.12 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 22.1.9-6.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 1.20.11-26.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 1.13.1-8.el9_4.7 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 22

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
cpe:/o:redhat:rhel_aus:7.7::server7.7—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:enterprise_linux:8::crb8—Red Hat
cpe:/a:redhat:rhel_aus:8.2::appstream8.2—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:7.7::server Versions 7.7 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.2::appstream Versions 8.2 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
Show 12 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_e4s:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_tus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:rhel_e4s:9.0::appstream9.0—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::crb9.4—Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.0::appstream Versions 9.0 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::crb Versions 9.4 — ·Red Hat

Remediation

  • Fix · CNA xwayland (X.Org) Fixed in 24.1.7

Red Hat 28 advisories

  • RHSA-2025:10410 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) tigervnc-1.12.0-14.el9_2.12, tigervnc-icons-1.12.0-14.el9_2.12, tigervnc-license-1.12.0-14.el9_2.12 +4
  • RHSA-2025:10381 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) tigervnc-1.11.0-22.el9_0.15, tigervnc-icons-1.11.0-22.el9_0.15, tigervnc-license-1.11.0-22.el9_0.15 +4
  • RHSA-2025:10377 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.1, tigervnc-server-1.1.0-25.el6_10.1
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.1, tigervnc-server-module-1.1.0-25.el6_10.1
Show 25 more Red Hat advisories
  • RHSA-2025:10375 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) tigervnc-1.8.0-36.el7_9.2, tigervnc-icons-1.8.0-36.el7_9.2, tigervnc-license-1.8.0-36.el7_9.2 +2
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) tigervnc-server-applet-1.8.0-36.el7_9.2, tigervnc-server-module-1.8.0-36.el7_9.2
  • RHSA-2025:10374 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) tigervnc-1.13.1-8.el9_4.7, tigervnc-icons-1.13.1-8.el9_4.7, tigervnc-license-1.13.1-8.el9_4.7 +4
  • RHSA-2025:10378 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) tigervnc-1.9.0-15.el8_2.14, tigervnc-icons-1.9.0-15.el8_2.14, tigervnc-license-1.9.0-15.el8_2.14 +4
  • RHSA-2025:10376 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) tigervnc-1.8.0-17.el7_7.1, tigervnc-icons-1.8.0-17.el7_7.1, tigervnc-license-1.8.0-17.el7_7.1 +2
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) tigervnc-server-applet-1.8.0-17.el7_7.1, tigervnc-server-module-1.8.0-17.el7_7.1
  • RHSA-2025:10370 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
  • RHSA-2025:10356 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
  • RHSA-2025:10351 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) xorg-x11-server-devel-1.20.11-26.el9_4, xorg-x11-server-source-1.20.11-26.el9_4
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) xorg-x11-server-1.20.11-26.el9_4, xorg-x11-server-Xdmx-1.20.11-26.el9_4, xorg-x11-server-Xephyr-1.20.11-26.el9_4 +4
  • RHSA-2025:10355 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) tigervnc-1.12.0-15.el8_8.14, tigervnc-icons-1.12.0-15.el8_8.14, tigervnc-license-1.12.0-15.el8_8.14 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) tigervnc-1.12.0-15.el8_8.14, tigervnc-icons-1.12.0-15.el8_8.14, tigervnc-license-1.12.0-15.el8_8.14 +4
  • RHSA-2025:10350 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) xorg-x11-server-1.20.11-18.el9_2, xorg-x11-server-Xdmx-1.20.11-18.el9_2, xorg-x11-server-Xephyr-1.20.11-18.el9_2 +4
  • RHSA-2025:10349 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) tigervnc-1.11.0-8.el8_4.13, tigervnc-icons-1.11.0-8.el8_4.13, tigervnc-license-1.11.0-8.el8_4.13 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) tigervnc-1.11.0-8.el8_4.13, tigervnc-icons-1.11.0-8.el8_4.13, tigervnc-license-1.11.0-8.el8_4.13 +4
  • RHSA-2025:10360 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) xorg-x11-server-1.20.4-32.el7_9, xorg-x11-server-Xephyr-1.20.4-32.el7_9, xorg-x11-server-Xorg-1.20.4-32.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) xorg-x11-server-Xdmx-1.20.4-32.el7_9, xorg-x11-server-Xnest-1.20.4-32.el7_9, xorg-x11-server-Xvfb-1.20.4-32.el7_9 +4
  • RHSA-2025:10352 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) xorg-x11-server-1.20.11-11.el9_0, xorg-x11-server-Xdmx-1.20.11-11.el9_0, xorg-x11-server-Xephyr-1.20.11-11.el9_0 +4
  • RHSA-2025:10344 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
  • RHSA-2025:10346 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
  • RHSA-2025:10343 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
  • RHSA-2025:10347 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) xorg-x11-server-Xwayland-21.1.3-8.el9_2
  • RHSA-2025:10348 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) xorg-x11-server-Xwayland-21.1.3-3.el9_0
  • RHSA-2025:10342 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) xorg-x11-server-1.20.10-2.el8_4, xorg-x11-server-Xdmx-1.20.10-2.el8_4, xorg-x11-server-Xephyr-1.20.10-2.el8_4 +5
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) xorg-x11-server-1.20.10-2.el8_4, xorg-x11-server-Xdmx-1.20.10-2.el8_4, xorg-x11-server-Xephyr-1.20.10-2.el8_4 +5
  • RHSA-2025:10258 Released 2025-07-02 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) xorg-x11-server-Xwayland-22.1.9-6.el9_4
  • RHSA-2025:9964 Released 2025-06-30 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) xorg-x11-server-1.20.6-4.el8_2, xorg-x11-server-Xdmx-1.20.6-4.el8_2, xorg-x11-server-Xephyr-1.20.6-4.el8_2 +5
  • RHSA-2025:9392 Released 2025-06-23 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.15.0-7.el8_10, tigervnc-icons-1.15.0-7.el8_10, tigervnc-license-1.15.0-7.el8_10 +4
  • RHSA-2025:9303 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server and xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-31.el9_6, xorg-x11-server-Xdmx-1.20.11-31.el9_6, xorg-x11-server-Xephyr-1.20.11-31.el9_6 +5
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-4.el9_6, xorg-x11-server-Xwayland-devel-23.2.7-4.el9_6, xorg-x11-server-devel-1.20.11-31.el9_6 +1
  • RHSA-2025:9305 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server and xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-1.20.11-26.el8_10, xorg-x11-server-Xdmx-1.20.11-26.el8_10, xorg-x11-server-Xephyr-1.20.11-26.el8_10 +5
    • Red Hat Enterprise Linux CRB (v. 8) xorg-x11-server-devel-1.20.11-26.el8_10, xorg-x11-server-source-1.20.11-26.el8_10
  • RHSA-2025:9306 Released 2025-06-23 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 9) tigervnc-1.14.1-8.el9_6, tigervnc-icons-1.14.1-8.el9_6, tigervnc-license-1.14.1-8.el9_6 +4
  • RHSA-2025:9304 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 10) xorg-x11-server-Xwayland-24.1.5-4.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10258

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9303

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
Show 26 more groups
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9304

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10342

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10343

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10344

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10346

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10347

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10348

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10349

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10350

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10351

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10352

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10355

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10356

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10360

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10370

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10374

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10375

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10376

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10377

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10378

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10381

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10410

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9305

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9306

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9392

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9964

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31243 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:10351
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:9304
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:9305, RHSA-2025:9392
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:9303, RHSA-2025:9306
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:10378, RHSA-2025:9964
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:10342, RHSA-2025:10349
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10355, RHSA-2025:10370
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:10348, RHSA-2025:10352, RHSA-2025:10381
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:10347, RHSA-2025:10350, RHSA-2025:10410
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:10258, RHSA-2025:10351, RHSA-2025:10374
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2025:10342, RHSA-2025:10349
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10370
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10355, RHSA-2025:10370
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:9305
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:9304
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:9303
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:10360, RHSA-2025:10375
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:10377
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2025:10376
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:10360, RHSA-2025:10375
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:10377
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2025:10376

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-49180
  2. 2026-10-03 Alias added: GHSA-gpcr-p5wh-5x85

References

Advisory 28

Other 3

  • TI-2022-25238 In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for… CVSS 3.1HIGH 7.7
  • TI-1999-00519 An X server's access control is disabled (e.g. CVSS 2.0HIGH 10.0
  • TI-2021-11657 LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote… CVSS 3.1CRITICAL 9.8
  • TI-2018-10465 An issue was discovered in libX11 through 1.6.5. CVSS 3.0CRITICAL 9.8
  • TI-2004-00826 Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other… CVSS 2.0HIGH 10.0
  • TI-2016-08240 Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM… CVSS 3.0CRITICAL 9.8
See all 206 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences