PT-2025-7897 · X.Org+12 · X.Org+12
Published
2025-02-25
·
Updated
2025-07-10
·
CVE-2025-26599
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org and Xwayland (affected versions not specified)
Description
An issue was found where the function
compCheckRedirect() may fail to allocate the backing pixmap, leading to a BadAlloc error. This error occurs without validating the window tree marked just before, resulting in partly initialized validated data and the potential use of an uninitialized pointer later.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
LPE
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
X.Org
Xwayland