Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

Summary

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.

Timeline

1. May 5, 2026, 2:41 PM UTCCVE published
2. May 6, 2026, 2:27 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Jun 8, 2026, 3:30 AM UTCRecord last updated

Affected versions

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• xorg-x11-server

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

• tigervnc

  Version range not reported

• xorg-x11-server

  Version range not reported

• xorg-x11-server-Xwayland

  Version range not reported

References 25