CVE-2025-49177

CWE-200 — Information ExposureCWE-476 — NULL Pointer Dereference9 documents8 sources
Severity
6.1MEDIUM
EPSS
0.1%
top 75.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
X.org Xwayland
Timeline
PublishedJun 17

Description

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:LExploitability: 1.8 | Impact: 4.2

Affected Packages3 packages

▶CVEListV5x.org/xwayland< 24.1.7
▶Debianxwayland< 2:24.1.8-1
▶Debianxorg-server< 2:21.1.7-3+deb12u10+2

🔴Vulnerability Details

3
CVEList
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode↗2025-06-17
▶
OSV
CVE-2025-49177: A flaw was found in the XFIXES extension↗2025-06-17
▶
GHSA
GHSA-pw35-9xmg-v8xw: A flaw was found in the XFIXES extension↗2025-06-17
▶

📋Vendor Advisories

5
Ubuntu
X.Org X Server vulnerabilities↗2025-06-17
▶
Red Hat
xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode↗2025-06-17
▶
Microsoft
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode↗2025-06-10
▶
Microsoft
hwrng: cavium - fix NULL but dereferenced coccicheck error↗2025-02-11
▶
Debian
CVE-2025-49177: xorg-server - A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode hand...↗2025
▶