Browse CVEs

HIGH 8.8 CVE-2026-56002 A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to exec… Libxfont 2.0.8+ Fix from $1,9502026-07-08 HIGH 8.8 CVE-2026-56003 A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXf… Libxfont 2.0.8+ Fix from $1,9502026-07-08 HIGH 8.8 CVE-2026-56001 A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the… Libxfont 2.0.8+ Fix from $1,9502026-07-08 CRITICAL 9.8 CVE-2007-5199 A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact. Libxfont No fix yet Fix from $2,3002017-08-18 HIGH 8.5 CVE-2015-1804 The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion fo… Libxfont after 1.4.8 Fix from $1,9502015-03-20 HIGH 8.5 CVE-2015-1802 The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a… Libxfont after 1.4.8 Fix from $1,9502015-03-20 HIGH 9.3 CVE-2013-6462EPSS 10% Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to caus… Libxfont Patch available Fix from $1,9502014-01-09 MEDIUM 6.5 CVE-2013-4396 Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authent… X.org X11 Patch available Fix from $1,6002013-10-10 MEDIUM 6.8 CVE-2013-2005 X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uniniti… Libxt after 1.1.3 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2066 Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafte… Libxv after 1.0.7 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1996 X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpecte… Libfs after 1.0.4 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1997 Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute … Libx11 after 1.5.99.901 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1999 Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via craf… Libxvmc after 1.0.7 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2000 Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary … Libxxf86dga after 1.1.3 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2001 Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via c… Libxxf86vm after 1.1.2 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2002 Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafte… Libxt after 1.1.3 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2003 Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vecto… Libxcursor after 1.1.13 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2004 The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when p… Libx11 after 1.5.99.901 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1986 Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow vi… Libxrandr after 1.4.0 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1988 Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via … Libxres after 1.0.6 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1989 Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via ve… Libxv after 1.0.7 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1990 Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via … Libxvmc after 1.0.7 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1991 Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow … Libxxf86dga after 1.1.3 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1992 Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via v… Libdmx after 1.1.2 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2062 Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via ve… Libxp after 1.0.1 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-2063 Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors r… Libxtst after 1.2.1 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1982 Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via … Libxext after 1.3.1 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1983 Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors r… Libxfixes after 5.0 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1985 Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vecto… Libxinerama after 1.1.2 Fix from $1,6002013-06-15 HIGH 7.1 CVE-2010-1166EPSS 5% The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of … X.org Patch available Fix from $1,9502010-04-29