PT-2026-46936 · X.Org Foundation+1 · X.Org Server+2
CVE-2026-50256
·
Published
2026-06-02
·
Updated
2026-07-13
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org X server (affected versions not specified)
Xwayland (affected versions not specified)
rootio-xorg-server versions prior to the fixed versions for Root:Debian:11
Description
A stack-based buffer overflow occurs in the X.Org X server and Xwayland due to a mismatch between the server and the libXfont2 library regarding the maximum font name length. During font alias resolution, the server allocates a 256 byte stack buffer, while libXfont2 allows an alias target name length of up to 1024 bytes. A font alias name between 257 and 1023 bytes can be copied into the undersized buffer without validation. This can lead to a server crash or privilege escalation if the X server is running with root privileges.
Recommendations
Update rootio-xorg-server to the latest fixed version for Root:Debian:11.
At the moment, there is no information about a newer version that contains a fix for X.Org X server and Xwayland.
Exploit
Fix
LPE
DoS
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rocky Linux
X.Org Server
Xwayland