---
id: CVE-2024-9632
title: >-
  Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation
  vulnerability
summary: >-
  A flaw was found in the X.org server. Due to improperly tracked allocation
  size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer
  overflow condition via a specially crafted payload, leading to denial of
  service or loc…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-122
vendor: Red Hat
product: xorg-server
affected:
  - xorg-server >= 1.1.1 < 21.1.14
  - xorg-x11-server-Xwayland (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - xorg-x11-server (all versions)
  - xorg-x11-server-Xwayland (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - xorg-x11-server (all versions)
  - xorg-x11-server-Xwayland (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - tigervnc (all versions)
  - xorg-x11-server
  - xorg-x11-server
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-10-30T13:34:32.792082Z'
published: '2024-10-30'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T21:27:56.690Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-9632'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:10090'
    label: 'RHSA-2024:10090'
  - url: 'https://access.redhat.com/errata/RHSA-2024:8798'
    label: 'RHSA-2024:8798'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9540'
    label: 'RHSA-2024:9540'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9579'
    label: 'RHSA-2024:9579'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9601'
    label: 'RHSA-2024:9601'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9690'
    label: 'RHSA-2024:9690'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9816'
    label: 'RHSA-2024:9816'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9818'
    label: 'RHSA-2024:9818'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9819'
    label: 'RHSA-2024:9819'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9820'
    label: 'RHSA-2024:9820'
  - url: 'https://access.redhat.com/errata/RHSA-2024:9901'
    label: 'RHSA-2024:9901'
  - url: 'https://access.redhat.com/errata/RHSA-2025:12751'
    label: 'RHSA-2025:12751'
  - url: 'https://access.redhat.com/errata/RHSA-2025:7163'
    label: 'RHSA-2025:7163'
  - url: 'https://access.redhat.com/errata/RHSA-2025:7165'
    label: 'RHSA-2025:7165'
  - url: 'https://access.redhat.com/errata/RHSA-2025:7458'
    label: 'RHSA-2025:7458'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-9632'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2317233'
    label: RHBZ#2317233
tags:
  - cve.org
epss: 0.00903
epssPercentile: 0.59875
ingestedAt: '2026-11-05T21:36:00.612Z'
---

## Overview

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

## Affected

- `xorg-server >= 1.1.1 < 21.1.14`
- `xorg-x11-server-Xwayland (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `xorg-x11-server (all versions)`
- `xorg-x11-server-Xwayland (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `xorg-x11-server (all versions)`
- `xorg-x11-server-Xwayland (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `tigervnc (all versions)`
- `xorg-x11-server`
- `xorg-x11-server`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.