Red Hat Wayland Xwayland CVE-2025-49175 Out-of-Bounds Read Vulnerability

Critical Vulnerability Information Vulnerability Identifier CVE ID: CVE-2025-49175 Impact Level Severity: Important Impact CVSS v3.0 Score: 6.1 Description Description: A vulnerability was discovered in the X Rendering extension when handling uninitialized integers. This is a client-maintained extension, and the flaw ensures that at least one previously used buffer is reused after being freed, leading to code reading and potential crashes. Statement Statement: This vulnerability is considered important because it allows an attacker within the X CopyArea sequence of the X Rendering extension to access arbitrary memory locations by exploiting uninitialized integers. This could result in process crashes or enable the process to access memory from other windows with administrative privileges. This behavior may lead to server crashes and denial of service, or allow attackers to access restricted memory, resulting in information disclosure. Mitigation Mitigation: For systems based on Red Hat Enterprise Linux 8, the PowerTools repository now provides new versions of some affected packages. For other supported applications, update to the latest available versions. Affected Packages and Related Red Hat Security Advisories Red Hat Enterprise Linux 8: wayland, wayland-devel, wayland-protocols, wayland-utils, xorg-x11-server-Xwayland Red Hat Enterprise Linux 7: wayland-server, wayland-server-devel Red Hat Enterprise Linux 6: libdrm, libdrm-devel CVSS v3.0 Score Details Severity: Medium Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality Impact: Low Integrity Impact: Low Availability Impact: High Weakness Understanding (CWE) CWE-125: Out-of-bounds Read - Confidentiality: Technical Impact: Information Disclosure; attackers may obtain sensitive data such as encryption keys, PII, memory addresses, or other information that could be used for further attacks. - Integrity: Technical Impact: Protection Mechanism Failure; out-of-bounds memory reads may cause other protective mechanisms to fail, increasing the likelihood of successful attacks. - Availability: Technical Impact: Degradation, Crash, Hang, or Abnormal Termination; attackers may cause applications to crash or become unresponsive. - Other: Technical Impact: Unexpected Results; this error condition may lead to other unintended or unpredictable outcomes.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Wayland Xwayland CVE-2025-49175 Out-of-Bounds Read Vulnerability

More from this source