CVE-2025-26596
High
Description
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.
SeverityHigh
CVSS7.8
Exploit probability—
Product
X.org Xwayland
PublishedFeb 25, 2025
First seenFeb 25, 2025
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- x.org xwayland24.1.6 or later
- x.org x_server21.1.16 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2025:2500
- access.redhat.com/errata/RHSA-2025:2502
- access.redhat.com/errata/RHSA-2025:2861
- access.redhat.com/errata/RHSA-2025:2862
- access.redhat.com/errata/RHSA-2025:2865
- access.redhat.com/errata/RHSA-2025:2866
- access.redhat.com/errata/RHSA-2025:2873
- access.redhat.com/errata/RHSA-2025:2874
- access.redhat.com/errata/RHSA-2025:2875
- access.redhat.com/errata/RHSA-2025:2879
- access.redhat.com/errata/RHSA-2025:2880
- access.redhat.com/errata/RHSA-2025:3976
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org xwayland | v < 24.1.6 | 24.1.6 |
| tigervnc tigervnc | No range specified | — |
| x.org x_server | v < 21.1.16 | 21.1.16 |
| redhat enterprise_linux | 7.0, 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.