buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2025-49177
Component Overview
Vulnerability Overview
Name
CVE-2025-49177
Source
NVD (
link
)
Debian (
link
)
Description
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CWEs
CWE-200
Published Date
Jun 17, 2025
Updated Date
Jun 30, 2026
Workaround
-
Advisories
Analysis
#
Affected Component
Analysis
xserver_xorg-server
Exploitable
Vulnerability Ratings
#
6.1
CVSSv31
NaN
other
Others affected component
#
Name
Project
Project Version
Version
Status
xserver_xorg-server
buildroot
master
21.1.24
Exploitable