CVE-2025-49180CWE-190

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

High · published June 17, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.2th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-06-17T15:00Z
EPSS history
Timeline
  • 17 JUN 15:00Z
    Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
    cvelistv5