A heap buffer overflow vulnerability exists in X.org X server before version 2.1.25 and XWayland before version 24.1.14 due to mismatched size calculations between XkbAllocNames and ChangeKeycodeRange. Authenticated X clients could exploit this flaw to crash the X server or potentially execute arbitrary code within the server context.