A heap buffer overflow vulnerability exists in X.Org X Server before version 21.1.15 and XWayland before version 24.1.14. This flaw is triggered by a XIPassiveUngrabDevice request with an out-of-range modifier value. Authenticated X clients could exploit this to crash the X server or potentially execute arbitrary code within the server context.