X.org vulnerabilities
47 CVEs and advisories name X.org as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-56002libXfont2 PCF Font Parsing Heap Buffer Overflow
- CVE-2026-56001libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
- CVE-2026-55999xorg-server / xwayland glamor font atlas Heap Buffer Overflow
- CVE-2026-56000xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
- CVE-2025-62229Xorg: xmayland: use-after-free in xpresentnotify structure creation
- CVE-2025-62230Xorg: xwayland: use-after-free in xkb client resource removal
- CVE-2025-62231Xorg: xmayland: value overflow in xkbsetcompatmap()
- CVE-2025-49180Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
- CVE-2025-49179Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
- CVE-2025-49178Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
- CVE-2025-49177Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
- CVE-2025-49176Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
- CVE-2025-49175Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
- CVE-2022-49737In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data
- CVE-2022-3553X.org Server xquartz X11Controller.m denial of service
- CVE-2022-3551X.org Server xkb.c ProcXkbGetKbdByName memory leak
- CVE-2022-3550X.org Server xkb.c _GetCountedString buffer overflow