Xorg-x11-server: heap buffer overflow in disabledevice

Summary

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

Timeline

1. Feb 28, 2024, 12:13 PM UTCCVE published
2. Apr 23, 2024, 9:47 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Nov 6, 2025, 8:53 PM UTCRecord last updated

Affected versions

• xorg-server

  1.21.1.7

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

References 17