9.1
CVE-2026-34000
- EPSS 0.49%
- Veröffentlicht 05.05.2026 16:16:11
- Zuletzt bearbeitet 08.06.2026 05:16:30
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Version9.0
Redhat ≫ Enterprise Linux Version10.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.382 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
|
| secalert@redhat.com | 6.1 | 1.8 | 4.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://access.redhat.com/security/cve/CVE-2026-34000
https://bugzilla.redhat.com/show_bug.cgi?id=2451107
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341