CoreCVE
Back

HIGH

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Published Feb 25, 2025

Description

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.

Affected products

Remediation

Vendor solution

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Red Hat statement

Xorg server does not run with root privileges in Red Hat Enterprise Linux 8 and 9, therefore, Red Hat Enterprise Linux 8 and 9 have been rated with a Moderate severity and are not affected by this bug.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (20)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Feb 25, 2025
Updated Jun 29, 2026
Reserved Feb 12, 2025
Link CVE-2025-26596
CISA Vulnrichment
Updated Feb 25, 2025
NVD
Status Modified
Modified Jun 29, 2026
Link CVE-2025-26596
Red Hat
Severity Important
Public date Feb 25, 2025
Links CVE-2025-26596 - Bugzilla