CVE-2025-26595CWE-121

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

High · published February 25, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-02-25T15:54Z
EPSS history
Timeline
  • 25 FEB 15:54Z
    Xorg: xwayland: buffer overflow in xkbvmodmasktext()
    cvelistv5