CVEvulnerability
CVE-2025-49180
7.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-06-17
- Last modified
- 2026-06-30
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190
Description
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://access.redhat.com/errata/RHSA-2025:10258 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10342 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10343 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10344 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10346 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10347 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10348 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10349 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10350 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10351 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10352 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10355 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10356 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10360 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10370 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10374 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10375 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10376 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10377 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10378 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10381 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:10410 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9303 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9304 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9305 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9306 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9392 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9964 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2025-49180 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2369981 bugzilla.redhat.com
- https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6 gitlab.freedesktop.org
- https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html lists.debian.org