Threats tagged 'ghsa-ww5w-hv3v-hp9v'

An out-of-bounds read vulnerability exists in wlroots versions before 0.20.2 in the read_surface_class() function within xwayland/xwm.c. This flaw allows local X11 clients to leak compositor heap memory by setting a WM_CLASS property with a NUL-terminated instance but an unterminated class, causing an over-read of heap bytes exposed as the window class or app_id over IPC.