9.1

CVE-2026-34000

Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
X.OrgX Server Version-
RedhatEnterprise Linux Version6.0
RedhatEnterprise Linux Version7.0
RedhatEnterprise Linux Version8.0
RedhatEnterprise Linux Version9.0
RedhatEnterprise Linux Version10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.382
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
secalert@redhat.com 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://access.redhat.com/security/cve/CVE-2026-34000
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2451107
Third Party Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341