HIGH Published February 25, 2025

CVE-2025-26598

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-787
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

tigervnc tigervnc x.org x server x.org xwayland redhat enterprise linux

References

View full NVD advisory →

More tigervnc vulnerabilities

Published the same day

Related reading

← Back to CVE watch