CVE-2025-62231: X.Org XkbSetCompatMap Unsigned Short Overflow Vulnerability

Critical Vulnerability Information CVE ID: CVE-2025-62231 Release Date: October 29, 2025 Last Updated: October 30, 2025, 05:45:33 AM UTC Vulnerability Severity: Medium CVSS v3 Score: 7.3 Description: - In the XkbSetCompatMap() function of the X Keyboard (Xkb) extension in the X.Org X server, incorrect boundary checks may lead to an unsigned short overflow. If an attacker sends specially crafted input data, this could result in memory corruption or a crash. Impact Assessment: - The Red Hat Product Security Team has rated this vulnerability as medium severity for RHEL 8 and 9, as the X.Org server does not run with root privileges by default. However, for RHEL 7, TigerVNC running as root, or SSH X11 forwarding environments, the impact is assessed as high due to potential for local privilege escalation or remote code execution. Mitigation: - No mitigation is currently available for this issue, or existing options do not meet Red Hat’s product security criteria, including ease of use and deployment, broad applicability across installations, or stability. Additional Information: - Bug Report 2402660: xorg: xmayland: value overflow in XkbSetCompatMap() - CWE-190: Integer Overflow or Wraparound Affected Packages and Red Hat Security Advisories: - Various modules in Red Hat Enterprise Linux 6, 7, 8, and 9 are affected. Common Vulnerability Scoring System (CVSS) Details: - CVSS v3 Base Score: 7.3 - Attack Vector: Local - Attack Complexity: Low - Required Privileges: Low - User Interaction: None - Scope: Unchanged - Confidentiality Impact: High - Integrity Impact: Low - Availability Impact: High CWE (Common Weakness Enumeration): Integer Overflow or Wraparound Acknowledgments: Thanks to Jan-Niklas Sohn (Trend Micro Zero Day Initiative) for reporting this issue.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-62231: X.Org XkbSetCompatMap Unsigned Short Overflow Vulnerability

More from this source