Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Summary

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

Timeline

1. Dec 13, 2023, 6:27 AM UTCCVE published
2. Dec 19, 2023, 4:14 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Jun 23, 2026, 5:19 PM UTCRecord last updated

Affected versions

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

References 19