A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-02-28 13:15
Updated : 2024-11-21 08:55
NVD link : CVE-2024-21885
Mitre link : CVE-2024-21885
CVE.ORG link : CVE-2024-21885
JSON object : View
Products Affected
No product.
CWE
CWE-122
Heap-based Buffer Overflow