CVE-2022-2320CWE-787

A flaw was found in the Xorg-x11-server

published September 1, 2022

CVSS
—
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-09-01T00:00Z
EPSS history
Timeline
  • 01 SEP 00:00Z
    A flaw was found in the Xorg-x11-server
    cvelistv5