CVE-2020-14363CWE-190CWE-416

An integer overflow vulnerability leading to a double-free was found in libX11

High · published September 11, 2020

CVSS v3.1
7.8
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Weaknesses
CWE-190 · Integer Overflow or Wraparound; CWE-416 · Use After Free
Published
2020-09-11T18:02Z
EPSS history
Timeline
  • 11 SEP 18:02Z
    An integer overflow vulnerability leading to a double-free was found in libX11
    cvelistv5