X.Org Foundation · Libx11 · CVE-2020-14344
**Name of the Vulnerable Software and Affected Versions**
libX11 versions prior to 1.6.10
**Description**
The issue is caused by an integer overflow in the libX11 library, which can lead to a heap-buffer overflow. This can potentially impact the confidentiality, integrity, and availability of protected information. The vulnerability is security-relevant when setuid programs call XIM client functions while running with elevated privileges.
**Recommendations**
For versions prior to 1.6.10, update to version 1.6.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of setuid programs that call XIM client functions to minimize the risk of exploitation.