A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
CVSS
No CVSS.
References
Configurations
No configuration.
History
04 Aug 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References |
|
16 Sep 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 May 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 May 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Feb 2024, 14:06
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-28 13:15
Updated : 2025-08-04 21:15
NVD link : CVE-2024-21885
Mitre link : CVE-2024-21885
JSON object : View
Products Affected
No product.
CWE
No CWE.