RHSA-2025:12751HighCVSS 9.8

Red Hat Security Advisory: tigervnc security update

Published
August 4, 2025
Last Modified
July 12, 2026

🔗 CVE IDs covered (18)

📋 Description

CVE-2022-4283 — xorg-x11-server: XkbGetKbdByName use-after-free CVE-2022-46340 — xorg-x11-server: XTestSwapFakeInput stack overflow CVE-2022-46341 — xorg-x11-server: XIPassiveUngrab out-of-bounds access CVE-2022-46342 — xorg-x11-server: XvdiSelectVideoNotify use-after-free CVE-2022-46343 — xorg-x11-server: ScreenSaverSetAttributes use-after-free CVE-2022-46344 — xorg-x11-server: XIChangeProperty out-of-bounds access CVE-2023-0494 — xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation CVE-2023-1393 — xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability CVE-2023-5367 — xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-6478 — xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty CVE-2023-6816 — xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer CVE-2024-0229 — xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access CVE-2024-9632 — xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-21885 — xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent CVE-2024-21886 — xorg-x11-server: heap buffer overflow in DisableDevice CVE-2024-31080 — xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31081 — xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice CVE-2024-31083 — xorg-x11-server: Use-after-free in ProcRenderAddGlyphs

🔗 References (21)