A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
| Type | CWE ID | Description |
|---|---|---|
| CWE | CWE-125 | Out-of-bounds Read |
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 6.1 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H |
| CAPEC ID | Description |
|---|
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
| Event | Date |
|---|---|
| Reported to Red Hat. | 2025-06-03 05:39:18 |
| Made public. | 2025-06-17 00:00:00 |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|