NetSight
IP …
high7.3

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned…

Impact

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Affected products

VendorProductAffected versions
X.OrgX Server
before 21.1.19
X.OrgXwayland
before 24.1.9
IbmVios
from 4.1.0 before 4.1.1.30
Version 4.1.2.0
IbmAix
from 7.2.5 before 7.2.5.12
from 7.3.2 before 7.3.3.3
Version 7.3.4
DebianDebian Linux
Version 11.0
RedhatEnterprise Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Els
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 8.4, 9.4
RedhatEnterprise Linux Tus
Versions 8.6, 8.8
RedhatEnterprise Linux Update Services For Sap Solutions
Versions 8.6, 8.8, 9.0, 9.2

Weakness classification

CWE-190

References