Logo
vulnerabilityCVE-2025-49177
Name
CVE-2025-49177
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
xserver_xorg-server
Exploitable

Vulnerability Ratings#


6.1
CVSSv31
NaN
other

Others affected component#


Name
Project
Project Version
Version
Status
buildroot
master
21.1.24
Exploitable