NetSight
IP …
high7.8

CVE-2026-50264

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.

Impact

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.

Affected products

VendorProductAffected versions
X.OrgX Server
before 21.1.23
X.OrgXwayland
before 24.1.12
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0, 10.0

Weakness classification

CWE-787

References