CVE-2025-26598CWE-787

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

High · published February 25, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-02-25T15:54Z
EPSS history
Timeline
  • 25 FEB 15:54Z
    Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
    cvelistv5