Threats Tagged 'cve-2025-26597'

Multiple security vulnerabilities have been identified in the xorg-x11-server-Xwayland component used in Red Hat Enterprise Linux 10 and related products. These include heap-based buffer overflows, use-after-free conditions, out-of-bounds writes, and use of uninitialized pointers. The issues affect the Xwayland server, which allows X clients to run under Wayland. Red Hat has released an important security update addressing these vulnerabilities.

A security update for xorg-x11-server-Xwayland on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including heap-based buffer overflows, use-after-free, out-of-bounds writes, and use of uninitialized pointers. These issues affect the Xwayland component, which allows X clients to run under Wayland. The vulnerabilities have a moderate security impact and are fixed in the updated packages provided by Red Hat.

Multiple security vulnerabilities have been identified and fixed in the xorg-x11-server component of Red Hat Enterprise Linux 9. These include a heap-based buffer overflow privilege escalation vulnerability in tigervnc (CVE-2024-9632) and several use-after-free, buffer overflow, heap overflow, out-of-bounds write, and uninitialized pointer vulnerabilities in Xwayland and related components (CVE-2025-26594 through CVE-2025-26601). Red Hat has released security updates addressing these issues with a moderate severity rating.

Multiple security vulnerabilities have been identified in the X.Org Xwayland component used by TigerVNC, a remote display system. These include use-after-free, buffer overflow, heap overflow, out-of-bounds write, and use of uninitialized pointer issues. The vulnerabilities affect Red Hat Enterprise Linux Server 6 and its Extended Life Cycle Support Extension. Red Hat has issued a security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in the xorg-x11-server component of Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include use-after-free, buffer overflow, heap overflow, out-of-bounds write, and use of uninitialized pointer issues within the Xwayland implementation of X.Org. The vulnerabilities are rated with high severity by Red Hat Product Security. A security update addressing these issues has been released for affected Red Hat Enterprise Linux 7 Extended Lifecycle Support variants.

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.