CVE-2025-49179: A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length…

PriorityP341high7.3CVSS 3.1

AVLACLPRLUINSUCHILAH

EPSS

0.28%

20.5th percentile

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	xorg-server	< xorg-server 2:21.1.7-3+deb12u10 (bookworm)	xorg-server 2:21.1.7-3+deb12u10 (bookworm)
debian	xwayland	< xorg-server 2:21.1.7-3+deb12u10 (bookworm)	xorg-server 2:21.1.7-3+deb12u10 (bookworm)
linux	linux_kernel	>= 0 < 4.15.0-239.251	4.15.0-239.251
msrc	azl3_wayland_1.22.0-1_on_azure_linux_3.0	—	—
msrc	azl3_xorg-x11-server-xwayland_24.1.6-2_on_azure_linux_3.0	—	—
msrc	cbl2_xorg-x11-server_1.20.10-16_on_cbl_mariner_2.0	—	—
x.org	xorg-server	>= 0 < 2:1.20.11-1+deb11u16	2:1.20.11-1+deb11u16
x.org	xorg-server	>= 0 < 2:21.1.7-3+deb12u10	2:21.1.7-3+deb12u10
x.org	xorg-server	>= 0 < 2:21.1.16-1.2	2:21.1.16-1.2
x.org	xorg-server	>= 0 < 2:21.1.16-1.2	2:21.1.16-1.2
x.org	xwayland	< 24.1.7	24.1.7
x.org	xwayland	>= 0 < 2:24.1.8-1	2:24.1.8-1

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

osv7.8HIGH

vendor_debian7.3HIGH

vendor_redhat7.3HIGH

vendor_msrc6.6MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.