Priority LOW 23
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X serv…
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00166 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 30
A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the…
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-126
Priority LOW 35
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or poten…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35
A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute cod…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 33
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potent…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 38
A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause c…
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00193 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 24
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X se…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-416
Priority LOW 29
A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00194 · Published 2026-10-28 · Partial fix · 21.1.25, 24.1.14 CWE-416