Threats tagged 'ghsa-2x93-8973-5mgq'

A heap buffer overflow vulnerability exists in the X.Org server's XISendDeviceHierarchyEvent function due to exceeding the allocated array length when new device IDs are added to the xXIHierarchyInfo struct. This flaw can cause application crashes or enable remote code execution in SSH X11 forwarding environments. Red Hat Enterprise Linux 8 and 9 are affected but rated moderate severity because the Xorg server does not run with root privileges. No effective mitigation is currently available that meets Red Hat's criteria.