CVE-2024-31082High· 7.3▾ TwilightA heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentatio…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
xorg-server >= 1.12.0 < 21.1.12tigervncxorg-x11-serverxorg-x11-server-Xwaylandtigervncxorg-x11-servertigervncxorg-x11-servertigervncxorg-x11-serverxorg-x11-server-Xwaylandtigervncxorg-x11-serverxorg-x11-server-XwaylandRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-31081High· 7.3Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
CVE-2024-31080High· 7.3Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
CVE-2026-11787Medium· 5.0389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing
CVE-2024-9632High· 7.8Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
CVE-2024-21885High· 7.8Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
CVE-2024-21886High· 7.8Xorg-x11-server: heap buffer overflow in disabledevice