Red Hat Product Security has issued an advisory (RHSA-2025:9305) for multiple vulnerabilities in xorg-x11-server and xorg-x11-server-Xwayland packages used in Red Hat Enterprise Linux 8. The vulnerabilities include an out-of-bounds read (CVE-2025-49175) and several integer overflow issues (CVE-2025-49176, CVE-2025-49179, CVE-2025-49180) as well as an unprocessed client request due to bytes to ignore (CVE-2025-49178). These issues affect the X Rendering Extension Animated Cursors, Big Requests Extension, X Record extension, and the X Resize, Rotate and Reflect (RandR) Extension. The advisory provides updated packages to remediate these vulnerabilities. The update is classified as important by Red Hat, and detailed CVSS scores are available on the respective CVE pages. The affected products include multiple architectures of Red Hat Enterprise Linux 8 and CodeReady Linux Builder variants.

The vulnerabilities could allow an attacker to cause out-of-bounds reads or integer overflows within the X server components, potentially leading to denial of service or other impacts depending on exploitation. The advisory does not specify known exploits in the wild. The issues affect core graphical server components that provide low-level functionality for graphical user interfaces on Red Hat Enterprise Linux 8 systems.

Red Hat has released security updates for xorg-x11-server and xorg-x11-server-Xwayland packages addressing these vulnerabilities. Users should apply the updates as described in the Red Hat advisory RHSA-2025:9305 and the referenced article https://access.redhat.com/articles/11258 to remediate the issues. No additional mitigation steps are indicated beyond applying the official patches.