high8.5
CVE-2026-55999
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer …
Impact
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X.Org | X Server | before 21.2.24 |
| X.Org | Xwayland | before 24.1.13 |