CVE-2023-5367CWE-787

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

High · published October 25, 2023

CVSS v3.1
7.8
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-10-25T19:46Z
EPSS history
Timeline
  • 25 OCT 19:46Z
    Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
    cvelistv5