CVE-2024-9632

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS

No CVSS.

Configurations

No configuration.

History

04 Aug 2025, 21:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:12751 -

13 May 2025, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:7458 -

13 May 2025, 15:15

Type Values Removed Values Added
CWE CWE-122
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : unknown
References
  • () https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html -
  • () https://access.redhat.com/errata/RHSA-2024:9818 -
  • () https://access.redhat.com/errata/RHSA-2024:9816 -
  • () https://access.redhat.com/errata/RHSA-2025:7165 -
  • () https://access.redhat.com/errata/RHSA-2024:9540 -
  • () https://access.redhat.com/errata/RHSA-2025:7163 -
  • () https://access.redhat.com/errata/RHSA-2024:9819 -
  • () https://access.redhat.com/errata/RHSA-2024:9690 -
  • () http://www.openwall.com/lists/oss-security/2024/10/29/2 -
  • () https://access.redhat.com/errata/RHSA-2024:9820 -
  • () http://seclists.org/fulldisclosure/2024/Oct/20 -
  • () https://access.redhat.com/errata/RHSA-2024:9901 -
  • () https://access.redhat.com/errata/RHSA-2024:10090 -

13 Nov 2024, 20:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:9601 -
  • () https://access.redhat.com/errata/RHSA-2024:9579 -

05 Nov 2024, 00:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:8798 -

30 Oct 2024, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-30 08:15

Updated : 2025-08-04 21:15


NVD link : CVE-2024-9632

Mitre link : CVE-2024-9632


JSON object : View

Products Affected

No product.

CWE

No CWE.