PT-2026-46942 · X.Org Foundation+1 · Xwayland+2
CVE-2026-50262
·
Published
2026-04-20
·
Updated
2026-07-13
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
X.Org X server (affected versions not specified)
Xwayland (affected versions not specified)
Description
An out-of-bounds read flaw exists in the
glXDisp ChangeDrawableAttributes() function. Due to an incorrect size validation check, the system may read a client-controlled number of bytes that exceed the request buffer, resulting in information disclosure. Additionally, a write path is present, although it requires byte-swapped clients, a feature that is disabled by default.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rocky Linux
X.Org Server
Xwayland