CVE-2025-62231

EPSS 0.28%
Veröffentlicht 30.10.2025 05:15:39
Zuletzt bearbeitet 01.07.2026 15:17:04
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Xorg: xmayland: value overflow in xkbsetcompatmap()

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 41

NVD 24 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

X.Org ≫ X Server Version < 21.1.19

X.Org ≫ Xwayland Version < 24.1.9

Ibm ≫ Vios Version >= 4.1.0 < 4.1.1.30

Ibm ≫ Vios Version4.1.2.0

Ibm ≫ Aix Version >= 7.2.5 < 7.2.5.12

Ibm ≫ Aix Version >= 7.3.2 < 7.3.3.3

Ibm ≫ Aix Version7.3.4

Debian ≫ Debian Linux Version11.0

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Version9.0

Redhat ≫ Enterprise Linux Version10.0

Redhat ≫ Enterprise Linux Aus Version8.2

Redhat ≫ Enterprise Linux Aus Version8.4

Redhat ≫ Enterprise Linux Aus Version8.6

Redhat ≫ Enterprise Linux Els Version6.0

Redhat ≫ Enterprise Linux Els Version7.0

Redhat ≫ Enterprise Linux Eus Version8.4

Redhat ≫ Enterprise Linux Eus Version9.4

Redhat ≫ Enterprise Linux Tus Version8.6

Redhat ≫ Enterprise Linux Tus Version8.8

Redhat ≫ Enterprise Linux Update Services For Sap Solutions Version8.6

Redhat ≫ Enterprise Linux Update Services For Sap Solutions Version8.8

Redhat ≫ Enterprise Linux Update Services For Sap Solutions Version9.0

Redhat ≫ Enterprise Linux Update Services For Sap Solutions Version9.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.2

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
secalert@redhat.com	7.3	1.8	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://access.redhat.com/security/cve/CVE-2025-62231

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2402660

Third Party Advisory

Issue Tracking

https://access.redhat.com/errata/RHSA-2025:19434

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19432

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19433

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19435

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:19489

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html

Third Party Advisory

Mailing List

https://access.redhat.com/errata/RHSA-2025:19623

Third Party Advisory

http://www.openwall.com/lists/oss-security/2025/10/28/7

Patch

Mailing List

https://access.redhat.com/errata/RHSA-2025:19909

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20960

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:21035

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20958

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:20961

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22041

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22051

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22055

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22056

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22040

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22077

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22096

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22164

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22167

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22364

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22365

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22426

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22427

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22667

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22729

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22742

Third Party Advisory

https://access.redhat.com/errata/RHSA-2025:22753

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0033

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0034

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0036

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0031

Third Party Advisory

https://access.redhat.com/errata/RHSA-2026:0035

Third Party Advisory

https://lists.x.org/archives/xorg-announce/2025-October/003635.html

Vendor Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2025-62231

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-62231

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-62231

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-62231