CVEvulnerability

CVE-2025-62231

7.3 HIGH Published 2025-10-30 Modified 2026-07-01 Official page ↗
Status
Analyzed
Published
2025-10-30
Last modified
2026-07-01
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Weaknesses
CWE-190

Description

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Affected configurations

• x.org x server (< 21.1.19) • x.org xwayland (< 24.1.9) • ibm vios (>= 4.1.0 < 4.1.1.30) • ibm vios 4.1.2.0 • ibm aix (>= 7.2.5 < 7.2.5.12) • ibm aix (>= 7.3.2 < 7.3.3.3) • ibm aix 7.3.4 • debian debian linux 11.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • redhat enterprise linux aus 8.2 • redhat enterprise linux aus 8.4 • redhat enterprise linux aus 8.6 • redhat enterprise linux els 6.0 • redhat enterprise linux els 7.0 • redhat enterprise linux eus 8.4 • redhat enterprise linux eus 9.4 • redhat enterprise linux tus 8.6 • redhat enterprise linux tus 8.8 • redhat enterprise linux update services for sap solutions 8.6 • redhat enterprise linux update services for sap solutions 8.8 • redhat enterprise linux update services for sap solutions 9.0 • redhat enterprise linux update services for sap solutions 9.2

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References