8.5
High
CVE-2026-55999 Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland…
Description
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xorg-server 21.1 | earliest → < 21.1.24 | 21.1.24 |
| xwayland 24.1 | earliest → < 24.1.13 | 24.1.13 |
References
- gitlab.freedesktop.org gitlab.freedesktop.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified