Description
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- X.Org / xwayland0 – 24.1.7
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10258
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10342
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10343
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10344
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10346
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10347
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10348
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10349
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10350
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10351
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10352
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10355
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10356
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10360
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10370
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10374
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10375
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10376
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10377
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10378
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10381
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10410
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9303
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9304
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9305
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9306
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9392
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9964
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-49180
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2369981
- MISChttps://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6
Updated 31m ago · 8 sources