NetSight
IP …
high7.8

CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland.

Impact

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.

Affected products

VendorProductAffected versions
TigervncTigervnc
All versions
X.OrgX Server
before 21.1.16
X.OrgXwayland
before 24.1.6
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0

Weakness classification

CWE-119

References