A heap buffer overflow vulnerability exists in the DisableDevice function of the X.Org server. This flaw can cause application crashes and, under certain conditions involving SSH X11 forwarding, may allow remote code execution. The vulnerability has a high severity rating with a CVSS score of 7.8. Red Hat notes that because the Xorg server does not run with root privileges on Red Hat Enterprise Linux 8 and 9, the severity is rated as moderate for those distributions. No effective mitigation is currently available that meets Red Hat's criteria for ease of use and stability.